composio

SUSPICIOUS. The core gateway purpose is coherent, and most examples use official/vendor endpoints, but the skill is internally inconsistent: it promises a gateway-only, no-key model while later directing the agent to read COMPOSIO_API_KEY from another workspace file and call the SDK directly. That disproportionate credential access, combined with broad cross-app action capability and intermediary routing through a custom gateway, makes the skill higher risk than a normal API integration guide.