close-automation

SUSPICIOUS. The skill's CRM capabilities broadly match its stated purpose, and it does not include local code execution, credential-file reading, or obvious malware behavior. However, all Close data and actions are mediated through a third-party hosted MCP endpoint (Rube/Composio) instead of direct official API usage, which creates meaningful data-flow and trust risk, especially because the skill supports outbound SMS and destructive CRM actions. This looks coherent as a CRM automation skill, but the intermediary service model raises medium security concern.