airtable-automation
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to configure an external MCP server at
https://rube.app/mcpas a prerequisite for its functionality. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from Airtable which may contain untrusted instructions and has the capability to perform state-changing operations.
- Ingestion points: The skill reads data from potentially untrusted sources via
AIRTABLE_LIST_RECORDS,AIRTABLE_GET_RECORD, andAIRTABLE_LIST_COMMENTS(defined in SKILL.md). - Boundary markers: There are no instructions or delimiters provided to ensure the agent ignores or treats content from these tools as data rather than instructions.
- Capability inventory: The skill provides tools for data modification and schema changes, including
AIRTABLE_CREATE_RECORD,AIRTABLE_UPDATE_RECORD,AIRTABLE_DELETE_RECORD,AIRTABLE_CREATE_FIELD, andAIRTABLE_UPDATE_TABLE(defined in SKILL.md). - Sanitization: The documentation does not specify any sanitization, filtering, or validation steps for the data retrieved from Airtable before it is processed by the agent.
Audit Metadata