remove-bg-automation

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose is coherent, but it routes Remove Bg operations through Composio's Rube MCP intermediary instead of direct official service APIs and relies on remote schema discovery to drive execution. Same-org provenance keeps this from malicious classification, but third-party mediation, opaque connection handling, and the mismatch with Composio's documented API-key-based setup make the trust and data-flow model medium risk.

Confidence: 83%Severity: 57%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:46 AM
Package URL
pkg:socket/skills-sh/ranbot-ai%2Fawesome-skills%2Fremove-bg-automation%2F@bf0be53fcd96de24e24ff220165bcc3c6b4b2861