yelp-automation
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill connects to and automates Yelp via the external "yelp" toolkit (set up via RUBE_MANAGE_CONNECTIONS and invoked with RUBE_MULTI_EXECUTE_TOOL through the Rube MCP), which will fetch and process user-generated, public Yelp content (reviews/listings), exposing the agent to untrusted third-party data that could carry indirect prompt injection.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill requires connecting to the external MCP server at https://rube.app/mcp at runtime to fetch tool schemas (via RUBE_SEARCH_TOOLS) and to execute tools (RUBE_MULTI_EXECUTE_TOOL), meaning remote content and remote execution directly control agent prompts and behavior.
Audit Metadata