l2s-automation

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly coherent with its stated Composio/Rube automation purpose and appears same-org official, so it does not look malicious. However, it requires trusting a hosted remote MCP service that dynamically defines available tools and can execute actions on connected L2s accounts, which creates meaningful security and autonomy risk despite acceptable purpose alignment.

Confidence: 79%Severity: 56%
Audit Metadata
Analyzed At
Mar 29, 2026, 04:36 AM
Package URL
pkg:socket/skills-sh/ranbot-ai%2Fawesome-skills%2Fl2s-automation%2F@d5489e8219871db995dbf254959c32a6c864b28d