asana-automation
Warn
Audited by Socket on Aug 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's Asana automation purpose is coherent, but its trust model is weakened by reliance on a legacy Rube/Composio hosted MCP endpoint and intermediary-managed OAuth/data flows rather than direct Asana integration. Risk is driven more by third-party brokering and outdated endpoint/tool references than by overt malware behavior.
Confidence: 89%Severity: 63%
Audit Metadata