datadog-automation
Warn
Audited by Socket on Jul 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's Datadog capabilities fit its stated purpose, but its trust and data-flow model is weaker than advertised: it routes Datadog auth and data through Composio's hosted Rube MCP rather than Datadog's first-party MCP path, and the referenced rube.app endpoint appears officially discontinued. No malware indicators or download-execute behavior are present, but the third-party credential/data brokering and stale endpoint make this medium risk.
Confidence: 88%Severity: 62%
Audit Metadata