composio-artifacts

SUSPICIOUS: the stub is coherent with its stated purpose and uses an official installer path, but its core behavior is to transively install a remote, unpinned full skill that may later receive API credentials and perform external actions. Medium security risk from mutable remote trust, not confirmed malware.