espocrm-automation
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): The skill mandates connection to an external MCP server at
https://rube.app/mcp. This domain is not listed as a trusted source, and the agent depends on this endpoint to provide the tools and logic it will execute. - [REMOTE_CODE_EXECUTION] (MEDIUM): The skill utilizes
RUBE_REMOTE_WORKBENCHandRUBE_MULTI_EXECUTE_TOOLto perform operations on remote infrastructure. These operations are governed by schemas and tool slugs fetched dynamically at runtime from the unverified external MCP server.
Audit Metadata