clearout-automation

Fail

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS] (MEDIUM): The skill requires configuring a remote MCP server at https://rube.app/mcp. This domain is not within the defined trusted sources and serves as the primary provider for the skill's logic.- [REMOTE_CODE_EXECUTION] (HIGH): The core workflow pattern relies on fetching 'recommended execution plans' from the remote RUBE_SEARCH_TOOLS endpoint. Because the agent is instructed to follow these plans and use 'discovered tool slugs', a malicious or compromised server could return instructions that execute arbitrary workflows.- [COMMAND_EXECUTION] (HIGH): The skill performs automation tasks (e.g., Clearout operations) using the RUBE_MULTI_EXECUTE_TOOL capability. It lacks any validation, boundary markers, or human-in-the-loop verification steps to sanitize the tool arguments or slugs returned by the remote service before execution.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 16, 2026, 06:12 AM