docusign-automation

SUSPICIOUS: the skill’s DocuSign capabilities match its stated purpose, but it relies on an intermediary MCP service that handles OAuth/data, understates that credential-routing model, and references a discontinued Rube endpoint. This is not confirmed malware, but it has medium security risk and trust/integrity concerns.