airtable-automation

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to configure an external MCP server at https://rube.app/mcp as a prerequisite for its functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from Airtable which may contain untrusted instructions and has the capability to perform state-changing operations.
  • Ingestion points: The skill reads data from potentially untrusted sources via AIRTABLE_LIST_RECORDS, AIRTABLE_GET_RECORD, and AIRTABLE_LIST_COMMENTS (defined in SKILL.md).
  • Boundary markers: There are no instructions or delimiters provided to ensure the agent ignores or treats content from these tools as data rather than instructions.
  • Capability inventory: The skill provides tools for data modification and schema changes, including AIRTABLE_CREATE_RECORD, AIRTABLE_UPDATE_RECORD, AIRTABLE_DELETE_RECORD, AIRTABLE_CREATE_FIELD, and AIRTABLE_UPDATE_TABLE (defined in SKILL.md).
  • Sanitization: The documentation does not specify any sanitization, filtering, or validation steps for the data retrieved from Airtable before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 12:20 AM