cloudconvert-automation
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill requires calling RUBE_SEARCH_TOOLS against an external MCP (e.g., https://rube.app/mcp and composio.dev toolkits) to fetch tool schemas, recommended execution plans, and other runtime data that the agent must read and act on—these are third-party, externally-provided artifacts that could contain untrusted/user-provided content and enable indirect prompt injection.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill requires adding and using the Rube MCP endpoint (https://rube.app/mcp) as its MCP server so that RUBE_SEARCH_TOOLS and RUBE_MULTI_EXECUTE_TOOL calls at runtime query that server to discover and invoke remote tools, meaning that external content from that URL can directly control agent actions and execute remote code.
Audit Metadata