circleci-automation
Warn
Audited by Socket on Apr 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities fit its CircleCI automation purpose, but it routes authentication, API access, and artifact retrieval through the third-party Rube/Composio MCP layer instead of direct CircleCI APIs. That makes the footprint coherent but higher-trust and higher-risk than a direct official API integration, especially because it can trigger pipelines and expose CI outputs.
Confidence: 82%Severity: 58%
Audit Metadata