gitlab-automation
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is purpose-aligned for GitLab automation, but it routes GitLab auth and data through a third-party MCP service and points to a discontinued Rube endpoint that does not match current official Composio MCP setup. This is not confirmed malware, but the obsolete endpoint and intermediary data flow create meaningful trust and security concerns.
Confidence: 88%Severity: 56%
Audit Metadata