Security Audit
brilliant-directories-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
brilliant-directories-automation received a trust score of 90/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Potential Command Injection via RUBE_REMOTE_WORKBENCH.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 17, 2026 (commit 99e2a295). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via RUBE_REMOTE_WORKBENCH The skill documentation describes the use of `RUBE_REMOTE_WORKBENCH` with `run_composio_tool()` for 'Bulk ops'. This suggests a capability to execute arbitrary Composio tools or complex operations. If the `run_composio_tool()` function allows the execution of arbitrary code or shell commands, or if its arguments can be manipulated by untrusted input (e.g., from a malicious LLM prompt or user input) to achieve such execution, it presents a significant command injection vulnerability. While the markdown itself doesn't perform the injection, it exposes a powerful capability that, if not properly sandboxed and validated by the Rube MCP system, could be exploited to execute arbitrary commands on the underlying system where Rube MCP operates. The Rube MCP system should ensure that `run_composio_tool()` within `RUBE_REMOTE_WORKBENCH` is strictly sandboxed and only allows execution of predefined, safe operations with rigorously validated arguments. Implement robust input validation and sanitization for all arguments passed to this function. The documentation should also clearly state the security implications and limitations of using `RUBE_REMOTE_WORKBENCH`. | LLM | SKILL.md:70 |
Scan History
Embed Code
[](https://skillshield.io/report/e374d2cdc5ad4e4f)
Powered by SkillShield