The Agent Skills Directory

[SAFE]: The skill serves as a technical integration guide for the WhatsApp Business API via an MCP server. It outlines standard operational procedures, connection management, and tool sequences for business automation. No malicious logic, obfuscation, or unauthorized data access patterns were identified.
[EXTERNAL_DOWNLOADS]: The setup instructions direct users to add the Rube MCP server endpoint (https://rube.app/mcp) to their client configuration. This is a standard procedure for integrating the Rube toolkit provided by Composio for AI agent tool access.
[INDIRECT_PROMPT_INJECTION]: The skill handles external communication data, which presents a surface for indirect prompt injection via incoming messages or media.
Ingestion points: External data enters the context through incoming WhatsApp messages (managed via WHATSAPP_SEND_REPLY) and template variable values.
Boundary markers: The instructions explicitly require user authorization for recipients and content, and advise inspecting message status rather than blindly retrying.
Capability inventory: The skill uses tools for sending messages, uploading media, and managing templates (WHATSAPP_SEND_MESSAGE, WHATSAPP_UPLOAD_MEDIA, WHATSAPP_CREATE_MESSAGE_TEMPLATE).
Sanitization: Includes requirements for E.164 phone number formatting and verification of template variable counts against live schemas.

whatsapp-automation