Productboard Automation
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill manages untrusted data from external sources (Productboard), which introduces a surface for indirect prompt injection.
- Ingestion points: Data enters the agent context via
PRODUCTBOARD_LIST_NOTESandPRODUCTBOARD_RETRIEVE_FEATUREin SKILL.md. - Boundary markers: Absent; there are no specific instructions to use delimiters or ignore embedded commands in the processed data.
- Capability inventory: The skill has write capabilities including
PRODUCTBOARD_CREATE_NOTEandPRODUCTBOARD_CREATE_NOTE_LINKin SKILL.md. - Sanitization: Absent; the instructions do not define validation or escaping for the external content.
- [EXTERNAL_DOWNLOADS]: The skill requires connecting to a remote Model Context Protocol (MCP) server at
https://rube.app/mcp. This connection is the standard mechanism for the skill's functionality and is provided by the development platform.
Audit Metadata