openrouter-automation
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill relies on dynamic tool discovery, meaning the agent's execution logic is determined by data retrieved from an external service (
RUBE_SEARCH_TOOLS). This design is part of the standard toolkit operation but technically exposes a surface for indirect instructions through tool schemas. - Ingestion points: Content returned from
RUBE_SEARCH_TOOLSused to populate tool calls. - Boundary markers: No explicit delimiters are specified in the markdown to isolate the external tool schema from the agent's processing instructions.
- Capability inventory: The skill uses
RUBE_MULTI_EXECUTE_TOOLandRUBE_REMOTE_WORKBENCHto act upon the discovered schemas. - Sanitization: The instructions recommend using schemas exactly as returned without additional validation layers.
Audit Metadata