slack-automation
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The Slack capabilities match the stated purpose, and OAuth-to-Slack via an integration platform is proportionate. However, the skill’s trust model depends on a deprecated remote Rube MCP endpoint with unclear current ownership/documentation relative to Composio, no version pinning, and no verifiable install trail beyond adding a URL. Data flow appears purpose-consistent to Slack automation, but install/execution trust is weaker than expected for a current, official skill.
Confidence: 88%Severity: 56%
Audit Metadata