make-automation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which presents a surface for indirect prompt injection. * Ingestion points: Data is retrieved from the Make API via the
MAKE_GET_OPERATIONStool. * Boundary markers: The instructions do not define specific delimiters or safety prompts to isolate external data from the agent's instructions. * Capability inventory: The skill has the capability to perform network operations and manage connections through therubeMCP toolkit. * Sanitization: No sanitization or validation of the retrieved Make scenario metadata is specified in the instructions. - [SAFE]: The skill references well-known services for its primary functionality and follows standard authentication workflows.
Audit Metadata