here-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill instructs the agent to query an external MCP server (https://rube.app/mcp) via RUBE_SEARCH_TOOLS / RUBE_GET_TOOL_SCHEMAS to fetch tool slugs, input schemas and recommended execution plans—which the agent must read and act on—exposing it to untrusted third‑party content that could embed instructions.