freshservice-automation

SUSPICIOUS: The skill's Freshservice automation purpose is coherent, but its trust model is dated and somewhat misleading. It routes actions and credentials through a legacy Composio/Rube MCP proxy, uses deprecated tool naming, and says no API keys are needed even though Freshservice authentication still occurs server-side via Composio. No direct malware indicators or rogue exfiltration endpoints are shown, but the remote dependency and mutable hosted tool surface make this a medium-risk skill.