asana-automation
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is purely instructional and metadata-based, defining workflows for external MCP tools. No local scripts or binaries are included.
- [EXTERNAL_DOWNLOADS]: The skill requires connecting to the external MCP server at
https://rube.app/mcp, which is a legitimate endpoint for the Rube integration service. - [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface.
- Ingestion points: Tools like
ASANA_GET_A_TASKandASANA_GET_TASKS_FROM_A_PROJECT(SKILL.md) ingest untrusted data from Asana task notes and names. - Boundary markers: None are specified in the provided instructions to distinguish between task data and agent instructions.
- Capability inventory: The skill possesses modification capabilities including
ASANA_CREATE_A_TASKand bulk execution viaASANA_SUBMIT_PARALLEL_REQUESTS(SKILL.md). - Sanitization: No sanitization or validation of the ingested Asana content is described.
Audit Metadata