activecampaign-automation-v2
Warn
Audited by Socket on Aug 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities mostly match its stated ActiveCampaign automation purpose, but trust and data flow are muddied by routing all actions through a discontinued/stale Rube MCP path and a third-party Composio layer with inconsistent authentication claims. This looks more like an outdated community wrapper than malware, but it carries medium risk because it mediates CRM credentials/data through external infrastructure without clear direct-service boundaries.
Confidence: 86%Severity: 58%
Audit Metadata