monday-automation
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to add an external MCP server endpoint
https://rube.app/mcp. This endpoint provides the tool definitions and handles the logic for interacting with Monday.com. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it retrieves and processes data from external Monday.com boards and items.
- Ingestion points: Tools like
MONDAY_LIST_BOARD_ITEMS,MONDAY_LIST_SUBITEMS_BY_PARENT, andMONDAY_GET_WORKSPACESingest untrusted data from the Monday.com API. - Boundary markers: The instructions do not specify any delimiters or warnings for the agent to ignore instructions embedded within the retrieved data.
- Capability inventory: The skill provides significant write capabilities, including board creation, item modification, and raw GraphQL mutations via
MONDAY_CREATE_OBJECT. - Sanitization: There are no mentioned mechanisms for sanitizing or validating the content retrieved from external sources before it is processed by the agent.
Audit Metadata