beaconstac-automation
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is mostly coherent with its stated Beaconstac automation purpose and uses same-org Composio infrastructure, so it is not clearly malicious. Risk comes from routing authentication, schemas, and actions through Composio's hosted MCP gateway instead of direct Beaconstac APIs, plus the ability to perform remote account actions and bulk operations via a third-party broker.
Confidence: 84%Severity: 56%
Audit Metadata