pipedrive-automation

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's CRM capabilities match its stated purpose, and the install path appears official to Composio/Rube, but the actual data flow is mediated through a third-party MCP/gateway rather than direct Pipedrive APIs. That makes credential handling and CRM data exposure broader than the description implies, raising medium-high security risk without clear evidence of malware.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Apr 14, 2026, 09:08 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fpipedrive-automation%2F@1bbc77c9502725ee37ea4d8d6ab2b66d241a88e2