docusign-automation
Warn
Audited by Snyk on Jul 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires adding and using the MCP endpoint https://rube.app/mcp at runtime (with instructions to call RUBE_SEARCH_TOOLS to fetch current tool schemas), so this remote URL provides tool schemas that directly control the agent's available tools and runtime behavior.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata