Amplitude Automation

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: amplitude-automation Version: 0.1.0 The skill bundle is designed to automate Amplitude tasks via the Rube MCP. The `SKILL.md` provides clear instructions for using specific Amplitude-related tools (e.g., `AMPLITUDE_SEND_EVENTS`, `AMPLITUDE_IDENTIFY`) and details on how to set up the Rube MCP connection at `https://rube.app/mcp`. There is no evidence of intentional harmful behavior such as data exfiltration, unauthorized execution, persistence, or malicious prompt injection attempts against the agent. All instructions are directly aligned with the stated purpose of Amplitude automation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

The agent could change Amplitude analytics data or cohort membership if the user asks it to perform those workflows.

Why it was flagged

The skill documents tools that can write analytics events and change cohort membership. This is purpose-aligned for Amplitude automation, but these are account-mutating actions.

Skill content

`AMPLITUDE_SEND_EVENTS` - Send one or more events to Amplitude ... `AMPLITUDE_UPDATE_COHORT_MEMBERSHIP` - Add/remove users from a cohort

Recommendation

Confirm the exact project, users, event payloads, and cohort changes before allowing write actions, especially for bulk updates.

Note

ASI03: Identity and Privilege Abuse

What this means

The connected account determines what Amplitude data the agent can read or modify.

Why it was flagged

The skill requires an authenticated Amplitude connection through Rube. This is expected for the stated purpose, but it grants delegated account access.

Skill content

Active Amplitude connection via `RUBE_MANAGE_CONNECTIONS` with toolkit `amplitude` ... follow the returned auth link to complete Amplitude authentication

Recommendation

Use the least-privileged Amplitude account or workspace available, and revoke the Rube connection when it is no longer needed.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Requests and relevant Amplitude task data may pass through Rube/Composio as part of tool execution.

Why it was flagged

The skill routes tool discovery and Amplitude actions through an external MCP service. This is disclosed and central to the skill, but it introduces a third-party data and permission boundary.

Skill content

Add `https://rube.app/mcp` as an MCP server in your client configuration.

Recommendation

Only connect this MCP server if you trust the provider and understand what Amplitude permissions the connection grants.