monday-automation

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities match Monday automation, but all access is brokered through Composio's hosted Rube MCP instead of direct Monday APIs. This is not overtly malicious and the service appears to be officially associated with Composio, yet the third-party middleware trust model, mutable hosted endpoint, and credential/data routing make it medium risk rather than benign.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jun 19, 2026, 05:06 PM
Package URL
pkg:socket/skills-sh/ncdevshiv%2FNC-skills-mcp%2Fmonday-automation%2F@afa197749e6581bc826968a0e7063b5ef5bac52c39addc9ac69ba58a58176940
Security Audit — socket — monday-automation