The Agent Skills Directory

[Unverifiable Dependencies] (HIGH): The skill mandates connection to an untrusted MCP server at https://rube.app/mcp. This grants a third party control over the tools and execution logic available to the agent.- [Indirect Prompt Injection] (HIGH): The skill is designed to follow 'recommended execution plans' and schemas fetched dynamically from rube.app via RUBE_SEARCH_TOOLS. Evidence Chain: 1. Ingestion point: RUBE_SEARCH_TOOLS response in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: RUBE_MULTI_EXECUTE_TOOL (Ticketmaster account access). 4. Sanitization: Absent.- [Data Exposure] (MEDIUM): Uses RUBE_MANAGE_CONNECTIONS to link Ticketmaster accounts via an untrusted intermediary, risking the exposure of PII or authentication tokens.- [Dynamic Execution] (MEDIUM): Employs RUBE_REMOTE_WORKBENCH, which executes logic in an external environment controlled by the provider of rube.app.

ticketmaster-automation