langbase-automation

SUSPICIOUS. The skill's purpose and capabilities broadly align, and the publisher/source relationship appears legitimate, but the actual data flow is a managed proxy/gateway model through Rube/Composio rather than direct Langbase API use. The hosted MCP endpoint, dynamic remote tool execution, and setup inconsistency around 'no API keys needed' create medium security risk even without clear evidence of malware.