Basecamp Automation

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a coherent Basecamp automation skill, but it can publish project content and change project access, so users should confirm sensitive actions before use.

Before installing, make sure you trust the Rube MCP provider and the connected Basecamp account. Treat message publishing, message updates, user creation, and access changes as high-impact actions that should be reviewed and explicitly confirmed.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

If used carelessly, the agent could post or overwrite Basecamp messages visible to project members.

Why it was flagged

The skill instructs the agent to use Basecamp tools that can publish or modify visible project message-board content.

Skill content

`BASECAMP_CREATE_MESSAGE` - Create a new message on the board [Required] ... `BASECAMP_PUT_BUCKETS_MESSAGES` - Update an existing message [Optional]

Recommendation

Confirm the target project, message content, publication status, and recipients before allowing message creation or updates.

Medium

#ASI03: Identity and Privilege Abuse

What this means

The connected account could add users, remove users, or create new users in Basecamp projects.

Why it was flagged

The skill includes instructions for changing who has access to Basecamp projects, using the connected user's delegated Basecamp privileges.

Skill content

`BASECAMP_PUT_PROJECTS_PEOPLE_USERS` - Grant or revoke project access [Required for access changes]

Recommendation

Require explicit user confirmation before granting, revoking, or creating project users, and verify all names and IDs first.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Basecamp project data and requested actions may be processed through Rube/Composio and Basecamp as part of normal operation.

Why it was flagged

The skill depends on a remote MCP provider and Basecamp OAuth, so tool calls and account actions flow through external services.

Skill content

Add `https://rube.app/mcp` as an MCP server ... follow the returned auth link to complete Basecamp OAuth

Recommendation

Use this only with a Rube MCP endpoint and Basecamp account you trust, and review what data/actions are being sent through the integration.