airtable-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflows, the agent uses Composio/Airtable MCP tools like AIRTABLE_LIST_RECORDS and AIRTABLE_LIST_COMMENTS to ingest record/comment text from an Airtable base/table that an outsider (tenant user) can have populated with free text, without needing to select a specific item before the workflow fetches it.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs adding the external MCP endpoint https://rube.app/mcp and relies on calling RUBE_SEARCH_TOOLS at runtime to fetch tool schemas from that server, meaning remote content from that URL can directly control the agent's tools/instructions.