vercel-automation
Fail
Audited by Socket on Mar 18, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
SUSPICIOUS: The skill is purpose-aligned and uses an apparently official Composio/Rube pathway, with no download-execute behavior or obvious malware indicators. Risk comes from third-party mediation of Vercel OAuth/API access and the ability to perform high-impact infrastructure changes through a hosted MCP service.
Confidence: 87%Severity: 58%
Audit Metadata