Productboard Automation
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is coherent with its stated Productboard automation purpose, and the install sources appear same-org and documented. However, it routes Productboard authentication and workspace data through the third-party Composio/Rube MCP service instead of direct Productboard APIs, creating medium trust, credential-forwarding, and data-handling risk.
Confidence: 85%Severity: 58%
Audit Metadata