Security Audit
tomba-automation
github.com/ComposioHQ/awesome-claude-skillsTrust Assessment
tomba-automation received a trust score of 98/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 0 medium, and 1 low severity. Key findings include Generic Tool Execution via Rube MCP.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 17, 2026 (commit 99e2a295). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| LOW | Generic Tool Execution via Rube MCP The skill instructs the LLM to use `RUBE_MULTI_EXECUTE_TOOL` and `RUBE_REMOTE_WORKBENCH` which are generic execution mechanisms for any tool discovered via `RUBE_SEARCH_TOOLS`. This design pattern allows the LLM to dynamically execute a wide range of operations exposed by the Tomba toolkit through Rube MCP. While this provides flexibility, it means the skill itself does not impose specific constraints on the actions that can be performed. The actual permissions and potential for unintended actions depend entirely on the scope of tools exposed by the Tomba toolkit via Rube and the LLM's interpretation of user intent. If the underlying Tomba tools have broad or sensitive capabilities (e.g., bulk deletion, data export), an LLM could be prompted to execute them without explicit, granular user confirmation for each specific sensitive action. Implement stricter guardrails within the LLM's prompting or environment to ensure explicit user confirmation for sensitive operations, especially when using generic execution tools like `RUBE_MULTI_EXECUTE_TOOL` or `RUBE_REMOTE_WORKBENCH`. Ensure that the underlying Tomba toolkit's tools exposed via Rube MCP adhere to the principle of least privilege and require appropriate authorization and scope limitations. | LLM | SKILL.md:46 |
Scan History
Embed Code
[](https://skillshield.io/report/03b05c3730c321ac)
Powered by SkillShield