brevo-automation

SUSPICIOUS. The skill’s functional scope matches Brevo automation, but its trust model is misaligned: it instructs users to connect to a discontinued legacy Rube MCP endpoint, omits current Composio auth requirements, and routes Brevo credentials and account actions through third-party Composio/Rube infrastructure instead of Brevo’s official API/MCP. This is not confirmed malware, but it is a medium-high security risk due to outdated install guidance, indirect credential/data flows, and disproportionate trust in a remote MCP intermediary.