page-x-automation
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- EXTERNAL_DOWNLOADS (MEDIUM): The skill requires the user to add an external MCP server endpoint (
https://rube.app/mcp) that is not part of the trusted source list. - REMOTE_CODE_EXECUTION (MEDIUM): The skill dynamically fetches tool schemas and execution plans from the remote server via
RUBE_SEARCH_TOOLSand executes them usingRUBE_MULTI_EXECUTE_TOOL. This allows the external server to dictate the logic executed by the agent. - PROMPT_INJECTION (LOW): The skill is vulnerable to Indirect Prompt Injection (Category 8). 1. Ingestion points:
RUBE_SEARCH_TOOLSandRUBE_GET_TOOL_SCHEMASfetch remote data. 2. Boundary markers: Absent. 3. Capability inventory:RUBE_MULTI_EXECUTE_TOOLandRUBE_REMOTE_WORKBENCH. 4. Sanitization: Absent.
Audit Metadata