freshservice-automation

SUSPICIOUS. The skill’s stated purpose matches its capabilities, and the MCP endpoint appears to be an official Composio/Rube service rather than a random payload source. However, all Freshservice actions and authentication are funneled through a third-party intermediary remote MCP instead of directly to Freshservice, which raises data-flow and credential-handling concerns. The vendor’s apparent discontinuation of Rube further weakens install and execution trust. No clear malware indicators or hidden execution are present, but the gateway design and stale service status make this medium risk rather than benign.