$ ~/registry/skill/composiohq-composio-skills-sourcegraph-automation

SKILL

sourcegraph-automation

Name: sourcegraph-automation
Author: Composio

Automate Sourcegraph searches and code workflows through Rube MCP.

Stars

★ 67,763

Source

GitHub

Updated

2026-07-15

// securityCaution

Prompt only, no code
Open source
Community-trusted· 64.7k

Summary

This skill appears to be open-source prompt-like material with no direct local API key requirement or fixed remote endpoint declared, so its standalone risk is low. Caution is still warranted because actual use depends on external Rube MCP/Composio and a Sourcegraph connection, which introduces network calls and third-party integration that should be verified in a controlled environment.

CredentialsCaution

The material states that no API keys are needed, but it requires an active Sourcegraph connection via RUBE_MANAGE_CONNECTIONS and may redirect users to an auth link to complete setup; this suggests the skill does not directly collect secrets, yet it depends on account authorization handled by an external connection system.

Network egressCaution

The README explicitly instructs users to add https://rube.app/mcp as an MCP server and perform actions through Composio's Sourcegraph toolkit; this means task content and parameters will be exchanged via Rube/Composio and Sourcegraph-related services. The metadata says there are no remote endpoints, which is not fully consistent with the documentation, so the actual outbound domains should be verified at deployment time.

Code executionLow risk

Based on the provided material, this is a prompt/workflow document and does not declare that it starts local processes, runs scripts, or requests system-level execution privileges. While it can invoke external MCP tools, the skill text itself does not contain auditable local code execution logic.

Data accessCaution

The documentation does not state that it directly reads or writes local files; however, by using RUBE_SEARCH_TOOLS, RUBE_MULTI_EXECUTE_TOOL, and the Sourcegraph connection for automation tasks, it may access code and related resources authorized in Sourcegraph. The material does not define least-privilege scope or clear data boundaries, so the real access should be assessed based on the external tool's granted permissions.

Supply chainLow risk

The source is an open GitHub repository with strong community adoption (64.7k stars), which is a significant lowering factor for risk; the visible content is mainly README/prompt material rather than a binary or closed-source component. Still, the license is not declared, maintenance status is unknown, and the actual dependent Rube MCP/Composio services are not fully auditable from this material alone.

Recommendations

Before enabling it, verify the actual destination domains and data types sent to rube.app/mcp, Composio, and Sourcegraph.
Authorize with a dedicated low-privilege Sourcegraph account and grant only the minimum resources needed for the task.
Test it first in an isolated environment and record what operations the RUBE_* tools can actually perform and return.
Review the privacy policy, authorization flow, and log retention practices of Rube MCP and Composio.

Audited by: gpt-5.4 · 2026-06-17

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "sourcegraph-automation" skill from askskill:
1. Download https://raw.githubusercontent.com/ComposioHQ/awesome-claude-skills/master/composio-skills/sourcegraph-automation/SKILL.md
2. Save it as ~/.claude/skills/sourcegraph-automation/SKILL.md
3. Reload skills and tell me it's ready

// download

Download SKILL.mdInstall manifest ↗

// docs

Sourcegraph Automation via Rube MCP

Automate Sourcegraph operations through Composio's Sourcegraph toolkit via Rube MCP.

Toolkit docs: composio.dev/toolkits/sourcegraph

Prerequisites

Rube MCP must be connected (RUBE_SEARCH_TOOLS available)
Active Sourcegraph connection via RUBE_MANAGE_CONNECTIONS with toolkit sourcegraph
Always call RUBE_SEARCH_TOOLS first to get current tool schemas

Setup

Get Rube MCP: Add https://rube.app/mcp as an MCP server in your client configuration. No API keys needed — just add the endpoint and it works.

Verify Rube MCP is available by confirming RUBE_SEARCH_TOOLS responds
Call RUBE_MANAGE_CONNECTIONS with toolkit sourcegraph
If connection is not ACTIVE, follow the returned auth link to complete setup
Confirm connection status shows ACTIVE before running any workflows

Tool Discovery

Always discover available tools before executing workflows:

RUBE_SEARCH_TOOLS
queries: [{use_case: "Sourcegraph operations", known_fields: ""}]
session: {generate_id: true}

This returns available tool slugs, input schemas, recommended execution plans, and known pitfalls.

Core Workflow Pattern

Step 1: Discover Available Tools

RUBE_SEARCH_TOOLS
queries: [{use_case: "your specific Sourcegraph task"}]
session: {id: "existing_session_id"}

Step 2: Check Connection

RUBE_MANAGE_CONNECTIONS
toolkits: ["sourcegraph"]
session_id: "your_session_id"

Step 3: Execute Tools

RUBE_MULTI_EXECUTE_TOOL
tools: [{
  tool_slug: "TOOL_SLUG_FROM_SEARCH",
  arguments: {/* schema-compliant args from search results */}
}]
memory: {}
session_id: "your_session_id"

Known Pitfalls

Always search first: Tool schemas change. Never hardcode tool slugs or arguments without calling RUBE_SEARCH_TOOLS
Check connection: Verify RUBE_MANAGE_CONNECTIONS shows ACTIVE status before executing tools
Schema compliance: Use exact field names and types from the search results
Memory parameter: Always include memory in RUBE_MULTI_EXECUTE_TOOL calls, even if empty ({})
Session reuse: Reuse session IDs within a workflow. Generate new ones for new workflows
Pagination: Check responses for pagination tokens and continue fetching until complete

Quick Reference

Operation	Approach
Find tools	`RUBE_SEARCH_TOOLS` with Sourcegraph-specific use case
Connect	`RUBE_MANAGE_CONNECTIONS` with toolkit `sourcegraph`
Execute	`RUBE_MULTI_EXECUTE_TOOL` with discovered tool slugs
Bulk ops	`RUBE_REMOTE_WORKBENCH` with `run_composio_tool()`
Full schema	`RUBE_GET_TOOL_SCHEMAS` for tools with `schemaRef`

Powered by Composio

Automate Codereadr workflows via Rube MCP using current tool schemas first.

ComposioGet→

$ loading_