outlook-calendar-automation

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). This skill instructs adding and trusting an external MCP endpoint (https://rube.app/mcp) that will handle OAuth authorization and supply dynamic tool schemas, which enables credential harvesting, unauthorized calendar access/data exfiltration, and remote tool execution/supply-chain backdoor abuse.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires adding the MCP endpoint https://rube.app/mcp to the client and instructs calling RUBE_SEARCH_TOOLS at runtime to fetch current tool schemas from that endpoint, so remote content from https://rube.app/mcp can directly control the agent's tools/instructions.