Productboard Automation

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is coherent with its stated Productboard automation purpose, and the install sources appear same-org and documented. However, it routes Productboard authentication and workspace data through the third-party Composio/Rube MCP service instead of direct Productboard APIs, creating medium trust, credential-forwarding, and data-handling risk.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:35 AM
Package URL
pkg:socket/skills-sh/ranbot-ai%2Fawesome-skills%2Fproductboard-automation%2F@a125bb86c411f1abc109269b4bf04c862766bb04