composio-connect
Fail
Audited by Snyk on Jun 21, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). Suspicious: this is a personal/unknown GitHub repo that instructs running "npx clawhub@latest install composio-connect", which will download and execute an unverified npm package (npx runs code), a common vector for malware distribution.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata