weathermap-automation
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill requires the user to add an external MCP server endpoint
https://rube.app/mcp. This domain is not included in the Trusted GitHub Organizations or Repositories list. - [COMMAND_EXECUTION] (LOW): The skill utilizes
RUBE_MULTI_EXECUTE_TOOLandRUBE_REMOTE_WORKBENCHto execute tools defined and hosted by the remote MCP server. - [PROMPT_INJECTION] (LOW): The skill is susceptible to indirect prompt injection because it instructs the agent to search for and follow tool schemas and execution plans provided by the external server. • Ingestion points: Tool definitions, input schemas, and execution plans are retrieved from the
RUBE_SEARCH_TOOLSresponse via therube.appendpoint. • Boundary markers: Absent; the instructions explicitly tell the agent to use the returned data to define its actions without specific delimiters or warnings to ignore instructions inside those schemas. • Capability inventory: The skill provides access toRUBE_MULTI_EXECUTE_TOOL,RUBE_REMOTE_WORKBENCH, andRUBE_MANAGE_CONNECTIONSfor remote execution and session management. • Sanitization: None; the skill encourages using exact field names and types provided by the remote search results.
Audit Metadata