make-automation

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • EXTERNAL_DOWNLOADS (LOW): The skill requires users to add an external MCP server endpoint (https://rube.app/mcp). This domain is not included in the predefined list of trusted GitHub organizations or repositories. While necessary for the skill's functionality, users should verify the security of the third-party service.
  • PROMPT_INJECTION (LOW): Indirect Prompt Injection Surface Detected. The skill processes untrusted data from external sources. * Ingestion points: The tool MAKE_GET_OPERATIONS retrieves data and logs from external Make scenarios, which could contain instructions intended to influence the agent. * Boundary markers: Absent. There are no instructions for the agent to use delimiters or ignore embedded instructions within the retrieved data. * Capability inventory: The skill operates within the Rube MCP environment, which possesses significant capabilities including connection management (RUBE_MANAGE_CONNECTIONS) and tool execution (RUBE_MULTI_EXECUTE_TOOL). * Sanitization: Absent. The instructions do not specify any validation or sanitization steps for the data fetched from the Make API.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:07 PM