discord-automation
Warn
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation directs users to add an external MCP server at
https://rube.app/mcp. This creates a dependency on a third-party infrastructure for the skill's operations which is not among the recognized trusted providers or well-known technology services. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted content from Discord and provides capabilities to execute sensitive actions.
- Ingestion points:
DISCORDBOT_LIST_MESSAGESandDISCORDBOT_LIST_MESSAGE_REACTIONS_BY_EMOJIare used to pull external content into the agent context (SKILL.md). - Boundary markers: Absent; there are no instructions to use specific delimiters or to disregard instructions found within message bodies.
- Capability inventory: The skill provides access to powerful tools such as
DISCORDBOT_ADD_GUILD_MEMBER_ROLE,DISCORDBOT_CREATE_GUILD_ROLE, andDISCORDBOT_EXECUTE_WEBHOOK(SKILL.md). - Sanitization: Absent; the instructions do not define any validation, filtering, or escaping for data retrieved from Discord before it is processed or used in subsequent tool calls.
Audit Metadata