ip2proxy-automation

The skill utilizes `RUBE_MULTI_EXECUTE_TOOL` and references `RUBE_REMOTE_WORKBENCH` with `run_composio_tool()`. These are generic mechanisms for executing tools provided by the Rube MCP system. While the skill's stated context is 'Ip2proxy Automation', the skill description itself does not explicitly restrict the `tool_slug` or `run_composio_tool()` calls to only Ip2proxy-specific operations. If the Rube MCP system provides tools with broad permissions (e.g., filesystem access, arbitrary command execution, or network requests outside the intended scope), a malicious prompt could potentially manipulate the LLM to discover and execute such tools. This could lead to data exfiltration, command injection, or other unauthorized actions. The skill's recommendation to 'Always search first' for tools further emphasizes the dynamic nature of tool selection, increasing the risk if the available toolset is not strictly controlled.