ComposioHQ/composio
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
Scanned 2026-07-09 · gemini v1
Dimension breakdown
Security
40/100
5 findings
Quality
97/100
3 findings
License
88/100
2 findings
Completeness
20/100
7 findings
Findings (17)
- CRITICALsecuritySupply Chain Risk: Pre-install Script Execution
- CRITICALcompletenessMissing mcpName in package.json
- CRITICALcompletenessMissing server.json manifest
- HIGHsecuritySupply Chain Risk: External OpenAPI Specification Pull
- HIGHsecurityBroken Access Control / Insecure Direct Object References (IDOR)
Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.
Maintainer of this repo?
Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.
Claim listingEmbed the badge.
Drop it into your README. Every view backlinks to this verification page.
Markdown
[](https://archimedes.market/r/ComposioHQ/composio)HTML
<a href="https://archimedes.market/r/ComposioHQ/composio"><img src="https://archimedes.market/api/badge/ComposioHQ/composio.svg" alt="Archimedes Trust Verified"/></a>Browse bounties
Find paid engineering work matching this skill set
Verify another repo
Free, 30 seconds
MCP integration
Surface bounties + verified engineers via MCP
This report is generated automatically from public code and may be wrong. Maintainer? Request a re-scan or removal.