Security Audit
highergov-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
highergov-automation received a trust score of 82/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Broad tool execution capabilities via Rube MCP, Unpinned Rube MCP dependency.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 20, 2026 (commit 27904475). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Broad tool execution capabilities via Rube MCP The skill exposes `RUBE_MULTI_EXECUTE_TOOL` and `RUBE_REMOTE_WORKBENCH`, which allow the LLM to execute arbitrary tools discovered through `RUBE_SEARCH_TOOLS` or potentially any Composio tool. This grants the LLM very broad permissions over Highergov operations and potentially other integrated systems, increasing the risk of unauthorized actions if the LLM is compromised or misdirected. Implement fine-grained access control or allow-listing for specific tool slugs and operations that the LLM is permitted to execute. Restrict `RUBE_REMOTE_WORKBENCH` to a predefined set of safe operations or remove it if not strictly necessary. Ensure the LLM's environment has robust guardrails to prevent misuse of these powerful tools. | LLM | SKILL.md:60 | |
| MEDIUM | Unpinned Rube MCP dependency The skill's manifest specifies a dependency on the "rube" MCP without a specific version or endpoint. This means the skill could interact with any version of the Rube MCP provided by `rube.app/mcp`, including future versions that might introduce breaking changes, new functionalities, or altered security postures, leading to unpredictable behavior or potential vulnerabilities. If possible, specify a version or a more specific endpoint for the Rube MCP dependency to ensure consistent behavior and reduce the risk of unexpected changes from upstream. Consult Composio documentation for best practices on pinning MCP dependencies. | LLM | SKILL.md:2 |
Scan History
Embed Code
[](https://skillshield.io/report/94e032afa030ff76)
Powered by SkillShield