Security Audit
go-to-webinar-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
go-to-webinar-automation received a trust score of 94/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Broad access to GoToWebinar functionalities, Unversioned external MCP dependency.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 17, 2026 (commit 99e2a295). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Unversioned external MCP dependency The skill depends on the 'rube' MCP, specified in the manifest and referenced in the `SKILL.md` as `https://rube.app/mcp`. There is no version pinning for this external dependency. Changes to the Rube MCP's API, behavior, or security posture could impact the skill without explicit user awareness or control. This introduces a supply chain risk where the skill's functionality and security are tied to an unversioned external service. If possible, specify a version or a more stable endpoint for the Rube MCP dependency. Implement monitoring for changes in the external service to mitigate potential breaking changes or security vulnerabilities. | LLM | SKILL.md:10 | |
| INFO | Broad access to GoToWebinar functionalities The skill, through the `RUBE_MULTI_EXECUTE_TOOL`, is designed to execute any GoToWebinar operation exposed by the Rube MCP. While this is the intended functionality, it grants broad access to GoToWebinar features, limited only by the scope of the Rube toolkit and the user's GoToWebinar permissions. Users should be aware of the potential scope of actions this skill can perform. Ensure that the Rube MCP and its GoToWebinar toolkit enforce least privilege principles and that users are aware of the full scope of actions possible. The skill's documentation already recommends discovering tools first, which helps in limiting the immediate scope of execution. | LLM | SKILL.md:57 |
Scan History
Embed Code
[](https://skillshield.io/report/9f0d6819de8e1ba5)
Powered by SkillShield