render-automation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for automating Render services using the Rube MCP bridge. All network operations are directed towards well-known services (rube.app and composio.dev) and the official Render API. No evidence of credential theft, obfuscation, or unauthorized command execution was found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which creates a potential surface for indirect prompt injection, though this is inherent to its DevOps automation purpose.
- Ingestion points: External data enters the agent context through tools like
RENDER_LIST_SERVICES,RENDER_LIST_PROJECTS, andRENDER_RETRIEVE_DEPLOY(SKILL.md). - Boundary markers: There are no explicit delimiters or warnings to ignore instructions embedded in the Render API responses.
- Capability inventory: The skill includes the ability to trigger actions such as deployments via
RENDER_TRIGGER_DEPLOY(SKILL.md). - Sanitization: No validation or sanitization of input from the Render API is described in the workflows.
Audit Metadata