render-automation
Warn
Audited by Socket on Apr 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's Render-management purpose matches its capabilities, but all actions and authentication are mediated through Composio's remote Rube MCP rather than Render's official API. The main risks are intermediary credential/data routing, unpinned remote service trust, and the ability to trigger real deployments; there is no clear evidence of malware or overt credential theft.
Confidence: 84%Severity: 58%
Audit Metadata