Security Audit
recruitee-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
recruitee-automation received a trust score of 95/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Broad tool execution capability via RUBE_REMOTE_WORKBENCH.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 17, 2026 (commit 99e2a295). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Broad tool execution capability via RUBE_REMOTE_WORKBENCH The skill documentation mentions `RUBE_REMOTE_WORKBENCH` with `run_composio_tool()` for 'Bulk ops'. The name `run_composio_tool()` suggests the ability to execute arbitrary Composio tools, potentially beyond the scope of the Recruitee toolkit. If `RUBE_REMOTE_WORKBENCH` allows execution of tools from other connected toolkits via `run_composio_tool()`, this could lead to excessive permissions, allowing the agent to interact with systems or data not intended for this specific skill. The documentation does not provide specific constraints or examples for `run_composio_tool()` to limit its scope, which could lead to an LLM using it in an overly broad manner. Clarify the scope of `run_composio_tool()` when used with `RUBE_REMOTE_WORKBENCH`. If it's intended to be restricted to the `recruitee` toolkit, this should be explicitly stated in the documentation and ideally enforced by the Rube MCP. Provide examples of how to safely use `RUBE_REMOTE_WORKBENCH` with `run_composio_tool()` to ensure it only performs Recruitee-related operations or operations within a clearly defined and limited scope. | LLM | SKILL.md:80 |
Scan History
Embed Code
[](https://skillshield.io/report/9e1c62ceb54b57d3)
Powered by SkillShield