composio-connect

Fail

Audited by Snyk on Jun 21, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). Suspicious: this is a personal/unknown GitHub repo that instructs running "npx clawhub@latest install composio-connect", which will download and execute an unverified npm package (npx runs code), a common vector for malware distribution.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 21, 2026, 05:09 PM
Issues
1
Security Audit — snyk — composio-connect