docusign-automation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's DocuSign automation scope is coherent, but it relies on a deprecated/discontinued Composio Rube MCP path and routes actions through a third-party intermediary instead of direct DocuSign APIs. This looks more like stale and trust-sensitive integration guidance than malware, but the remote dependency and intermediary data flow raise meaningful security risk.

Confidence: 92%Severity: 52%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:58 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fdocusign-automation%2F@addc552aac68448bd58b5a42292e86957c2292259c9fdc7298253c29bf63e286