salesforce-automation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose broadly matches Salesforce automation, but its actual access path is a third-party managed gateway and the setup instructions are inconsistent with current official Composio documentation. The main risk is trust and data-flow integrity: Salesforce auth and CRM actions are routed through Composio/Rube infrastructure, while the skill references a legacy endpoint that appears stale after Rube’s shutdown notice.

Confidence: 89%Severity: 62%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:59 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Fsalesforce-automation%2F@a737c46d029511ef801b4e4c07fa81f9009a9fb982323e0e753bb93bbd8f0d26