Lemon Squeezy Automation
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external Lemon Squeezy API responses (orders, products, subscriptions) and dynamic tool schemas. While this creates a potential attack surface for indirect instructions, it is inherent to the skill's primary purpose of API automation. No evidence of intentional bypass or lack of sanitization was found.
- [EXTERNAL_DOWNLOADS]: The skill references the Rube MCP server (rube.app/mcp) and Composio documentation. These are official vendor resources and are categorized as safe for their intended use.
- [DYNAMIC_EXECUTION]: The skill describes the use of a remote workbench for bulk operations using Python snippets. These operations are conducted within the vendor's controlled environment and follow standard development patterns for this toolkit.
Audit Metadata