docusign-automation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires adding https://rube.app/mcp as the MCP server and instructs calling RUBE_SEARCH_TOOLS at runtime to fetch current tool schemas, so content from that URL is fetched during runtime and can directly control agent prompts/instructions.