monday-automation
Warn
Audited by Socket on Jun 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's capabilities match Monday automation, but all access is brokered through Composio's hosted Rube MCP instead of direct Monday APIs. This is not overtly malicious and the service appears to be officially associated with Composio, yet the third-party middleware trust model, mutable hosted endpoint, and credential/data routing make it medium risk rather than benign.
Confidence: 84%Severity: 56%
Audit Metadata