Security Audit
tally-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
tally-automation received a trust score of 82/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Broad tool execution capabilities via Rube MCP, Unpinned dependency on Rube MCP.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 17, 2026 (commit 99e2a295). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Broad tool execution capabilities via Rube MCP The skill instructs the agent to use `RUBE_MULTI_EXECUTE_TOOL` and `RUBE_REMOTE_WORKBENCH` which provide extensive control over Tally operations. `RUBE_MULTI_EXECUTE_TOOL` can execute any discovered Tally tool, and `RUBE_REMOTE_WORKBENCH` with `run_composio_tool()` suggests a powerful, potentially arbitrary execution environment within the Rube ecosystem. This grants the agent broad permissions to interact with Tally, which could lead to unauthorized data modification or access if the agent's prompts are compromised or if the agent is not properly constrained. Implement strict access controls and monitoring for agents using this skill. Ensure the agent's scope is limited to necessary Tally operations. Review the capabilities of `RUBE_REMOTE_WORKBENCH` to understand its full potential impact and restrict its use if not absolutely necessary. | LLM | SKILL.md:47 | |
| MEDIUM | Unpinned dependency on Rube MCP The skill's manifest specifies a dependency on the `rube` MCP (`"mcp": ["rube"]`) without a version constraint. This means the skill will always use the latest version of the `rube` MCP. If the `rube` MCP undergoes breaking changes, introduces vulnerabilities, or becomes malicious, the skill would automatically inherit these issues without explicit user intervention or review. Pin the `rube` MCP dependency to a specific, known-good version (e.g., `"mcp": ["rube@1.2.3"]`) in the skill's manifest to prevent automatic updates that could introduce security risks. Regularly review and update dependencies. | LLM | Manifest:1 |
Scan History
Embed Code
[](https://skillshield.io/report/d8250d7b82102d79)
Powered by SkillShield