outlook-calendar-automation

SUSPICIOUS. The calendar automation purpose matches the Outlook capabilities, and the requested OAuth/calendar access is proportionate. However, the skill routes all actions through a third-party MCP service and instructs users to use a discontinued Rube endpoint/name set that conflicts with current official Composio documentation. This looks more like stale or misaligned infrastructure than confirmed malware, but the install/execution trust and credential-routing model raise medium risk.