beeminder-automation

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but all Beeminder access is mediated by Composio/Rube rather than direct Beeminder APIs, creating a third-party credential and data-routing trust boundary. Install trust is relatively acceptable because the endpoint and setup paths appear official to Composio, but the remote intermediary model and understated auth requirements raise medium risk.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 29, 2026, 02:35 AM
Package URL
pkg:socket/skills-sh/ranbot-ai%2Fawesome-skills%2Fbeeminder-automation%2F@6cc65da9b70dfded1108c5d346612cee47be774f