zenserp-automation
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's core purpose is coherent, and the publisher/source relationship appears legitimate, but the documentation understates credential requirements and routes all operations through Composio's Rube intermediary rather than directly to Zenserp. This is not confirmed malware, but it carries medium security risk due to brokered data flows, dynamic external tool discovery, and misleading setup claims.
Confidence: 85%Severity: 54%
Audit Metadata