activecampaign-automation
Warn
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to add 'https://rube.app/mcp' as a remote MCP server. This external source provides the core tools and functionality for the skill, creating a dependency on a service that is not among the recognized trusted vendors.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external CRM data which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: CRM data including contact details, email addresses, and task notes retrieved via toolkit tools like 'ACTIVE_CAMPAIGN_FIND_CONTACT'.
- Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat data retrieved from ActiveCampaign as untrusted content.
- Capability inventory: The skill has significant write capabilities, including the ability to create contacts, modify tags, change list subscriptions, and enroll contacts in automations.
- Sanitization: The skill does not implement or describe any sanitization or validation for the data ingested from the external CRM API before it is processed by the agent.
Audit Metadata