Security Audit
ayrshare-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
ayrshare-automation received a trust score of 90/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 1 medium, and 1 low severity. Key findings include Unpinned Rube MCP Dependency, Access to Remote Workbench for Code Execution.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 17, 2026 (commit 99e2a295). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Unpinned Rube MCP Dependency The skill's manifest specifies a dependency on 'rube' MCP without a version constraint. This means the skill will use whatever version of Rube MCP is currently available, which could lead to unexpected behavior, breaking changes, or the introduction of vulnerabilities if a future version of Rube MCP is compromised or contains regressions. It's a supply chain risk as the skill's behavior is not locked to a known-good version of its core dependency. Pin the 'rube' MCP dependency to a specific, known-good version in the skill's manifest. For example, `"rube": "^1.0.0"` or `"rube": "1.2.3"`. | Static | SKILL.md:5 | |
| LOW | Access to Remote Workbench for Code Execution The skill explicitly instructs the agent on how to use `RUBE_REMOTE_WORKBENCH` for 'Bulk ops' with `run_composio_tool()`. While the skill itself does not provide malicious code, making a tool available that can execute arbitrary code (even within a sandbox) introduces a potential risk. If the agent is later compromised or given malicious instructions, it could be directed to execute harmful code via this workbench, potentially leading to data manipulation or other unintended actions within the Ayrshare context or the broader Rube environment. If `RUBE_REMOTE_WORKBENCH` is not strictly necessary for the core functionality of this skill, consider removing its mention or restricting its availability. If it is necessary, ensure that the `run_composio_tool()` function has robust sandboxing and input validation to prevent arbitrary code execution or privilege escalation. | Static | SKILL.md:68 |
Scan History
Embed Code
[](https://skillshield.io/report/00b0fb39e542b9ef)
Powered by SkillShield