monday-automation

Warn

Audited by Socket on Feb 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The fragment describes a coherent, feature-rich integration for automating Monday.com workflows via an external MCP server. While there is no explicit malicious content, the architecture introduces notable trust boundaries and credential-management considerations due to third-party tooling and OAuth-based access. Recommend stringent validation of the MCP source, strict token-scoping, secure storage, and auditing of tool schemas before deployment. Treat as SUSPICIOUS-leaning benign but with non-trivial security considerations until assurances around MCP trust, token handling, and access scoping are provided.

Confidence: 65%Severity: 58%
Audit Metadata
Analyzed At
Feb 27, 2026, 09:38 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fmonday-automation%2F@1a975f1082e1896beb0b39706084dcf19fbb834b