Security Audit
hyperise-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
hyperise-automation received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Broad tool execution capabilities via Rube MCP.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 20, 2026 (commit 27904475). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Broad tool execution capabilities via Rube MCP The skill instructs the LLM to use `RUBE_MULTI_EXECUTE_TOOL` and `RUBE_REMOTE_WORKBENCH`. `RUBE_MULTI_EXECUTE_TOOL` allows execution of any tool slug discovered by `RUBE_SEARCH_TOOLS`. `RUBE_REMOTE_WORKBENCH` with `run_composio_tool()` is described for 'Bulk ops' and implies potentially broad or arbitrary execution within the Composio ecosystem. This grants the LLM access to a wide range of operations, which could be misused if the LLM is compromised or manipulated via prompt injection. The skill itself does not define granular permissions or constraints on what specific tools or arguments can be used, relying entirely on the Rube MCP's internal security and the LLM's interpretation. Implement stricter access controls within the Rube MCP for the Hyperise toolkit, or provide more granular tool definitions that limit the scope of actions the LLM can take. If possible, define specific allowed tool slugs and argument patterns within the skill's manifest or configuration to restrict the LLM's choices. Clarify the exact capabilities and security implications of `RUBE_REMOTE_WORKBENCH`. | LLM | SKILL.md:46 |
Scan History
Embed Code
[](https://skillshield.io/report/6bd226d0dfe67764)
Powered by SkillShield