gitlab-automation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is purpose-aligned for GitLab automation, but it routes GitLab auth and data through a third-party MCP service and points to a discontinued Rube endpoint that does not match current official Composio MCP setup. This is not confirmed malware, but the obsolete endpoint and intermediary data flow create meaningful trust and security concerns.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:58 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fgitlab-automation%2F@8a8b7991aa47d308f32941fb874a86e2f0e0cb57d7b3c120956148be8d88f11b