qualaroo-automation
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's capabilities match its stated Qualaroo automation purpose, and there is no obvious malware or local payload execution. However, all actions and likely auth flows are routed through Composio's hosted Rube MCP intermediary instead of directly to Qualaroo, creating meaningful third-party data-flow and credential-delegation risk.
Confidence: 86%Severity: 58%
Audit Metadata