ko-fi-automation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires connecting at runtime to the Rube MCP endpoint https://rube.app/mcp (used for RUBE_SEARCH_TOOLS / RUBE_MULTI_EXECUTE_TOOL and RUBE_MANAGE_CONNECTIONS), which returns tool schemas that control prompt/argument formation and executes remote tools, so this external URL directly influences prompts and executes actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly built around a "ko_fi" toolkit and instructs the agent to connect (RUBE_MANAGE_CONNECTIONS) and execute Ko Fi-specific tools (discovered via RUBE_SEARCH_TOOLS and invoked with RUBE_MULTI_EXECUTE_TOOL / run_composio_tool). Ko-fi is a payments/donations platform, and the workflow is specifically for automating Ko Fi operations (not a generic browser/API caller). Because the toolkit is specifically for a financial platform and the skill's primary purpose is to run Ko Fi tool actions (which can include sending/handling payments, withdrawals, donations, or other monetizing operations), this constitutes direct financial execution capability.