dropbox-automation
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configuration requires the user to add an external MCP server endpoint (
https://rube.app/mcp) to their client. This server hosts the 'rube' toolkit used for Dropbox operations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external Dropbox files, which may contain malicious instructions designed to influence agent behavior.
- Ingestion points: Remote file content is retrieved via tools like
DROPBOX_READ_FILEandDROPBOX_EXPORT_FILE(described in SKILL.md). - Boundary markers: The instructions do not specify any delimiters or ignore-instructions warnings for the agent when processing file content.
- Capability inventory: The skill grants the agent powerful file system capabilities including deletion (
DROPBOX_DELETE_FILE_OR_FOLDER), batch moves (DROPBOX_MOVE_BATCH), and the creation of public sharing links (DROPBOX_CREATE_SHARED_LINK). - Sanitization: There are no prompts or steps requiring the sanitization of file content before the agent processes or interprets the data.
Audit Metadata