Harvest Automation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references the Rube MCP server URL for setup, presenting an unverified third-party operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents time tracking, project management, client management, and task workflows for Harvest via Composio. These actions (logging hours, creating time entries, projects, clients, and tasks) support billing and project management workflows, which constitute indirect financial operations (submitting billable usage/time records for downstream billing).