airtable-automation

SUSPICIOUS. The skill’s Airtable automation purpose broadly matches its capabilities, but the trust and data-flow story is inconsistent: it directs all activity through the deprecated Rube MCP intermediary, claims setup that conflicts with current official Composio docs, and centralizes Airtable access in a third-party service rather than the official Airtable API. This is not confirmed malware, but it is a medium-high risk skill due to stale setup guidance, third-party credential/data routing, and real-world mutation capability.