resend-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs the agent to call RUBE_SEARCH_TOOLS against an external MCP (e.g., https://rube.app/mcp and composio.dev/toolkits/resend) to fetch tool schemas, recommended execution plans, and auth links, which are third-party content the agent must read and act on and could be untrusted.