convertkit-automation
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities fit ConvertKit automation, but the trust model is weakened by reliance on a discontinued Rube endpoint, stale setup instructions, and all data/auth flowing through a Composio-managed intermediary instead of directly to Kit. This looks more like outdated third-party integration guidance than malware, but it carries medium security risk and should not be treated as a clean, current setup path.
Confidence: 90%Severity: 58%
Audit Metadata