basin-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill instructs the agent to connect to the public Rube MCP endpoint (https://rube.app/mcp) and call RUBE_SEARCH_TOOLS / RUBE_GET_TOOL_SCHEMAS which return tool slugs, schemas and execution plans that the agent must read and act on, exposing it to untrusted third‑party content and possible indirect prompt injection.