skills/sickn33/antigravity-awesome-skills/box-automation/Socket

box-automation

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is broadly aligned with Box automation, and the Rube/Composio relationship appears legitimate. However, all Box access is mediated through a third-party MCP gateway and managed OAuth flow rather than direct Box APIs, creating medium risk around credential delegation, data exposure, and high-impact autonomous actions.

Confidence: 83%Severity: 61%

Audit Metadata

Analyzed At

Apr 29, 2026, 06:56 AM

Package URL

pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fbox-automation%2F@2d2dba52a181674d401cea9bfd7cd11d2ff6bde3