trello-automation

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s Trello capabilities fit its stated purpose, but it relies on a third-party MCP gateway and a specific rube.app endpoint whose setup claims are not clearly verified by the official Composio documentation found. Risk is driven by intermediary data flow and endpoint trust ambiguity, not by obvious malware or credential theft behavior.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Sep 10, 2026, 09:09 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Ftrello-automation%2F@c028d7a991827371eac6a7b6735e1042a419a93a318d22bed5fe1cf2bafa5673
Security Audit — socket — trello-automation