formcarry-automation
Warn
Audited by Socket on Jun 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is coherent, but its real data flow depends on a third-party MCP intermediary rather than direct Formcarry APIs, and the documented Rube endpoint appears stale/discontinued. No malware or local installer behavior is evident, but the credential delegation and remote action model create medium security risk.
Confidence: 87%Severity: 58%
Audit Metadata