composio

SUSPICIOUS. The skill is broadly aligned with its purpose as an official Composio integration/router, and the installer appears same-org and documented rather than a random payload. However, it combines a pipe-to-shell install, third-party credential centralization, intermediary routing of app actions/auth through Composio, transitive skill installation, and high-impact cross-app actions. This is better classified as a high-trust integration skill with meaningful security risk, not confirmed malware.