stripe-automation
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s Stripe purpose is coherent, and the data flow through Composio-managed Stripe tools is plausible for the stated use. However, the setup instructions are outdated and inconsistent with current official documentation: the referenced Rube MCP endpoint is stale/discontinued, the service is shut down, and the 'no API keys needed' claim conflicts with current Composio connection guidance. This is not confirmed malware, but it is an unreliable third-party integration path with medium security and trust risk.
Confidence: 92%Severity: 56%
Audit Metadata