composio-cli

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is purpose-aligned and uses an official same-org installer, so it does not look malicious. But it grants an AI agent broad authenticated action capability across many external services, including file upload, raw API proxying, and scripted workflows, which creates meaningful security risk despite coherent documentation.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Oct 16, 2026, 09:22 AM
Package URL
pkg:socket/skills-sh/remorses%2Fopencode-config%2Fcomposio-cli%2F@f3aa625fcb368219193bc39205d6543a836c98331fc47dc5860a2816f3c0234d