render-automation
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to connect to an external MCP server endpoint at https://rube.app/mcp, which is a core requirement for its functionality.
- [PROMPT_INJECTION]: The skill architecture creates an attack surface for indirect prompt injection through its interaction with the Render API.
- Ingestion points: Data returned by the tools RENDER_LIST_SERVICES and RENDER_RETRIEVE_DEPLOY in SKILL.md.
- Boundary markers: The instructions lack specific delimiters or instructions to the agent to ignore potentially malicious commands embedded in the external API responses.
- Capability inventory: The skill provides the agent with the ability to perform state-changing operations, such as triggering deployments via RENDER_TRIGGER_DEPLOY.
- Sanitization: There is no evidence of data sanitization or validation for the content retrieved from the Render service.
Audit Metadata