Run large codebase migrations and multi-file refactors. Uses the Composio CLI to coordinate issue tracking, batched PRs, and CI verification while the agent executes the transforms locally across hundreds of files.
- Stars
- 17,181
- Version
- v1
- Copies
- 0
Overview
Waxell rates it high risk: 1 finding, highest severity critical.
- Highest severity
- critical
- Findings
- 1
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
High risk Waxell rates it high risk: 1 finding, highest severity critical.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (1)
critical · 1
- critical
Tells Claude to download a script and pipe it to a shell
SKILL.md:22 · skill_risk:S1
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
- connectcomposio-communityConnect Codex to any app via the Composio CLI. Send emails, create issues, post messages, update databases - take real actions across… High riskEngineeringProductivity17k
- connect-appscomposio-communityConnect Claude to external apps via the Composio CLI. Use this skill when the user wants to send emails, create issues, post messages, or… High riskEngineeringProductivity17k
- deploy-pipelinecomposio-communityRun end-to-end deploy pipelines across Stripe, Supabase, and Vercel using the Composio CLI. Promote Stripe products, push Supabase… High riskEngineeringSales & marketing17k
- gh-address-commentscomposio-communityHelp address review/issue comments on the open GitHub PR for the current branch using gh CLI; verify gh auth first and prompt the user to… No issuesEngineeringSecurity17k