make-automation
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- EXTERNAL_DOWNLOADS (LOW): The skill requires users to add an external MCP server endpoint (
https://rube.app/mcp). This domain is not included in the predefined list of trusted GitHub organizations or repositories. While necessary for the skill's functionality, users should verify the security of the third-party service. - PROMPT_INJECTION (LOW): Indirect Prompt Injection Surface Detected. The skill processes untrusted data from external sources. * Ingestion points: The tool
MAKE_GET_OPERATIONSretrieves data and logs from external Make scenarios, which could contain instructions intended to influence the agent. * Boundary markers: Absent. There are no instructions for the agent to use delimiters or ignore embedded instructions within the retrieved data. * Capability inventory: The skill operates within the Rube MCP environment, which possesses significant capabilities including connection management (RUBE_MANAGE_CONNECTIONS) and tool execution (RUBE_MULTI_EXECUTE_TOOL). * Sanitization: Absent. The instructions do not specify any validation or sanitization steps for the data fetched from the Make API.
Audit Metadata