activecampaign-automation

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities mostly match its stated ActiveCampaign automation purpose, but it routes data and authentication through Composio/Rube rather than directly to ActiveCampaign and makes a misleading 'no API keys needed' claim. There is no evidence of malware or hidden payloads, but the third-party mediation and consequential account actions make this a medium-risk skill that should only be used with clear user approval per action.

Confidence: 83%Severity: 54%
Audit Metadata
Analyzed At
Apr 19, 2026, 05:04 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Factivecampaign-automation%2F@5a3b19ac32e3a06160ab4932495c45d6381f0e47