faceup-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill requires calling RUBE_SEARCH_TOOLS against the external Rube MCP/composio endpoints (e.g., https://rube.app/mcp and composio.dev/toolkits/faceup) to fetch tool slugs, input schemas and recommended execution plans—third-party content the agent is expected to read and act on, which could carry indirect prompt-injection.