asana-automation

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's Asana automation purpose is coherent, but its trust model is weakened by reliance on a legacy Rube/Composio hosted MCP endpoint and intermediary-managed OAuth/data flows rather than direct Asana integration. Risk is driven more by third-party brokering and outdated endpoint/tool references than by overt malware behavior.

Confidence: 89%Severity: 63%
Audit Metadata
Analyzed At
Aug 11, 2026, 06:48 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fasana-automation%2F@5f81c1f9e0fa344f7afe0aac11deae9526c9a901a805a8a2e235e695727c502c
Security Audit — socket — asana-automation