whatsapp-automation
Warn
Audited by Socket on Oct 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s WhatsApp capabilities match its stated purpose, but its setup instructions are outdated and partially inaccurate: it points to a discontinued Rube MCP endpoint and claims no API keys are needed despite current official Composio docs showing authenticated MCP usage. This is not confirmed malware, but the install/trust story is inconsistent enough to warrant caution, especially because the service mediates business messaging and connection auth through a third-party platform.
Confidence: 88%Severity: 56%
Audit Metadata