convertkit-automation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities fit ConvertKit automation, but the trust model is weakened by reliance on a discontinued Rube endpoint, stale setup instructions, and all data/auth flowing through a Composio-managed intermediary instead of directly to Kit. This looks more like outdated third-party integration guidance than malware, but it carries medium security risk and should not be treated as a clean, current setup path.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:58 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fconvertkit-automation%2F@612d857004251759aec512e75ae9e0de19117282aff7f2616b74f9f1c5714081