encodian-automation

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose matches its capabilities, and the referenced infrastructure appears to be official Composio/Rube. However, the skill routes discovery, auth, and execution through a third-party middleware layer instead of direct Encodian APIs, and its 'no API keys needed' claim conflicts with Composio documentation showing token-based MCP setup. This is not confirmed malware, but it carries medium risk from credential/data brokerage and remote action execution through hosted middleware.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Mar 29, 2026, 03:37 AM
Package URL
pkg:socket/skills-sh/ranbot-ai%2Fawesome-skills%2Fencodian-automation%2F@b1a70579be8b74b0894a79dc2303e623e0ae4526