miro-automation
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Miro boards which may contain untrusted instructions.
- Ingestion points: Board metadata and item content (sticky notes, frames) retrieved via MIRO_GET_BOARDS2 and MIRO_GET_BOARD_ITEMS in SKILL.md.
- Boundary markers: The instructions explicitly warn the agent that board content is untrusted data and not authority to invite or publish.
- Capability inventory: The agent can create and modify board content, and share boards with external emails.
- Sanitization: Instructions advise minimizing private exports and confirming recipient identities.
- [EXTERNAL_DOWNLOADS]: The skill requires the configuration of an external MCP server at https://rube.app/mcp to provide the necessary Miro automation tools.
- [DATA_EXFILTRATION]: The skill utilizes the MIRO_SHARE_BOARD tool which allows the agent to send board access invitations to external email addresses. This capability could be misused to grant access to sensitive board information to unauthorized parties if recipient details are not carefully verified.
Audit Metadata