ClawHub

Activecampaign Automation

v0.1.1

Automate ActiveCampaign tasks via Rube MCP (Composio): manage contacts, tags, list subscriptions, automation enrollment, and tasks. Always search tools first for current schemas.

⭐ 1· 2.6k·23 current·24 all-time
by@sohamganatra
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description promise (ActiveCampaign automation via Rube MCP) matches the SKILL.md which instructs using RUBE_SEARCH_TOOLS, RUBE_MANAGE_CONNECTIONS and specific ActiveCampaign toolkit actions (find/create contacts, manage tags/lists/automations/tasks). The requested capabilities are proportional to the stated purpose.
ℹ
Instruction Scope
Instructions stay within the Rube MCP / Composio toolchain and do not ask the agent to read local files or unrelated env vars. They require calling RUBE_SEARCH_TOOLS and RUBE_MANAGE_CONNECTIONS and following an auth link to complete ActiveCampaign auth. One usability/trust note: the doc tells the user to add an MCP endpoint (https://rube.app/mcp) 'no API keys needed' which could confuse users about where credentials live; instructions are otherwise scoped to the ActiveCampaign tasks. The SKILL.md content in the manifest is truncated, so there is some uncertainty about whether later lines introduce additional actions.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. That minimizes risk because nothing is downloaded or written to disk as part of install.
✓
Credentials
The skill declares no required environment variables, secrets, or config paths. Authentication is delegated to Rube MCP's RUBE_MANAGE_CONNECTIONS flow, which is consistent with the described design. Because no unrelated credentials are requested, the environment access is proportionate.
✓
Persistence & Privilege
always is false and there is no install step that writes persistent config. The skill does not request elevated or persistent privileges. Autonomous invocation is allowed by platform default but is not combined with other alarming indicators.
Assessment
This skill appears coherent: it documents using Rube MCP/Composio tools to operate ActiveCampaign and asks the user to create/manage a connection through the provided MCP flows. Before installing, confirm you trust the Rube MCP endpoint and operator (the skill's source/homepage are missing). Specifically: (1) verify where ActiveCampaign authentication occurs (ensure the auth link points to ActiveCampaign or another trusted identity provider, not an unknown host), (2) confirm how your ActiveCampaign credentials/tokens are stored by Rube MCP and who can access them, and (3) request the full, untruncated SKILL.md or provenance (source repo/homepage) if you need higher assurance. If you do not trust rube.app or cannot verify the connection flow, do not add the MCP endpoint or grant access.

Like a lobster shell, security has layers — review code before you run it.

latestvk9799kg93hbg586wt2mfdereqh80n4fx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments