trello-automation
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s Trello capabilities fit its stated purpose, but it relies on a third-party MCP gateway and a specific rube.app endpoint whose setup claims are not clearly verified by the official Composio documentation found. Risk is driven by intermediary data flow and endpoint trust ambiguity, not by obvious malware or credential theft behavior.
Confidence: 84%Severity: 56%
Audit Metadata