dpd2-automation
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- EXTERNAL_DOWNLOADS (MEDIUM): The skill directs users to connect an external MCP server at https://rube.app/mcp, which is not a trusted domain according to the safety guidelines.
- REMOTE_CODE_EXECUTION (MEDIUM): The skill relies on RUBE_REMOTE_WORKBENCH and RUBE_MULTI_EXECUTE_TOOL, where the specific execution logic and schemas are provided by a remote third-party server.
- PROMPT_INJECTION (LOW): This skill is vulnerable to Indirect Prompt Injection (Category 8). 1. Ingestion points: Data from RUBE_SEARCH_TOOLS. 2. Boundary markers: Absent. 3. Capability inventory: Remote tool execution and workbench access. 4. Sanitization: Absent.
Audit Metadata