square-automation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires adding https://rube.app/mcp as an MCP server and calls RUBE_SEARCH_TOOLS / RUBE_MANAGE_CONNECTIONS at runtime to obtain tool schemas that directly control agent behavior, so this external endpoint is a runtime dependency that can control prompts.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for Square payment processing (a payment gateway) and exposes specific actions that can move or affect money: SQUARE_LIST_PAYMENTS, SQUARE_CANCEL_PAYMENT, SQUARE_LIST_INVOICES, SQUARE_CANCEL_INVOICE, SQUARE_UPDATE_ORDER, etc. It requires an active Square connection and OAuth. These are specific financial-execution APIs, not generic tools.