amplitude-automation

SUSPICIOUS. The skill’s analytics capabilities match its stated purpose, but its trust and data-flow model are weaker than a direct Amplitude integration: it routes authenticated access through a third-party hosted MCP service, and the setup references a discontinued Rube endpoint/tool naming that no longer matches current official Composio documentation. This is not confirmed malware, but it is a medium-risk, stale intermediary integration that warrants caution.