Skills monday-automation
๐Ÿ“ฆ

monday-automation

Content revision r2 Medium Risk โš™๏ธ External commands๐ŸŒ Network access

Automate Monday.com Workflows with Rube MCP

Manual Monday.com administration is slow and error-prone. This skill guides agents through current Rube MCP tools for boards, items, columns, groups, subitems, and updates.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "monday-automation" from https://skillstore.io/skills/sickn33-monday-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-monday-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "monday-automation". List active boards in the Product workspace.

Expected outcome:

  • Product Roadmap, board 18420571, private
  • Release Planning, board 18421903, public
  • Two active boards found in Product.

Using "monday-automation". Move the Website Launch item to In Progress.

Expected outcome:

Found Website Launch on the Marketing board. Moved item 73190422 to the In Progress group and verified the new group.

Using "monday-automation". Prepare a new subitem named Draft announcement.

Expected outcome:

Located the parent item and prepared the subitem mutation. No change was made because confirmation is still required.

Security Audit

Medium Risk
v5 โ€ข 8/4/2026 Open versioned report

All 117 external-command alerts are Markdown backticks, and all three reconnaissance alerts are contextual false positives. The external MCP endpoint is a real low-risk network dependency. Raw GraphQL guidance adds medium risk because destructive mutations lack confirmation controls.

1
Files scanned
242
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
Unrestricted Raw GraphQL Mutations
The skill permits raw GraphQL mutations and names destructive operations such as deleting items and archiving boards without requiring explicit confirmation or scope checks.
The documented raw mutation interface is explicit, and line 204 names delete_item and archive_board. No confirmation control appears in the skill.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
Line 21 instructs users to connect an external Rube MCP endpoint. This creates a real third-party network and OAuth trust dependency, although the URL is clearly disclosed.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-monday-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-monday-automation/security.svg)](https://skillstore.io/skills/sickn33-monday-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-monday-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-monday-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-monday-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

sickn33. (2026). monday-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-monday-automation/audits/5

BibTeX citation

@techreport{sickn33-sickn33-monday-automation-2026, author = {sickn33}, title = {monday-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-monday-automation/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "monday-automation security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-08-04" url: "https://skillstore.io/skills/sickn33-monday-automation/audits/5" identifiers: - type: other value: "skillstore:sickn33-monday-automation:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Build a Project Board

Create a board, add groups and columns, and confirm identifiers before adding work items.

Maintain Delivery Items

Find tasks, update status or dates, move items between groups, and add progress notes.

Automate Advanced Workflows

Page through large boards, inspect subitems, and prepare controlled GraphQL mutations for unsupported operations.

Try These Prompts

List My Boards
Connect to my Monday.com account and list active boards. Show each board name, identifier, kind, and workspace.
Create a Team Board
Create a public board named [BOARD NAME] in [WORKSPACE]. Add groups [GROUPS] and columns [COLUMNS]. Confirm the planned structure first.
Update Matching Items
On board [BOARD], find items matching [CRITERIA]. Preview the matches, then set [COLUMN] to [VALUE] after my confirmation.
Design a Subitem Workflow
Inspect [BOARD] and its relevant parent items. Plan a GraphQL mutation to create [SUBITEM DETAILS]. Explain effects and wait for confirmation.

Best Practices

  • Search current tool schemas before every workflow because parameters can change.
  • Resolve names to exact identifiers and preview affected records before mutations.
  • Require confirmation for deletes, archives, raw GraphQL, or changes affecting multiple items.

Avoid

  • Do not guess board, group, column, workspace, or item identifiers.
  • Do not send complex column values using simple string formats.
  • Do not run destructive or broad raw GraphQL mutations without a reviewed preview.

Frequently Asked Questions

What connection does this skill require?
It requires Rube MCP and an active Monday.com connection established through the provided OAuth flow.
Can it create boards and board structure?
Yes. It documents tools for creating workspaces, boards, groups, and columns, subject to account permissions.
Can it update every column type?
It supports simple and complex values, but each column type needs the format required by the current tool schema.
How does it find the correct record?
It lists workspaces, boards, groups, columns, or items and matches display names to returned identifiers.
Does it support large boards?
It documents cursor pagination with up to 500 items per page. Monday.com complexity limits still apply.
Can it create or delete unsupported objects?
Raw GraphQL can cover unsupported operations. Destructive mutations need explicit confirmation and careful permission review.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

81e05e636292629114b76cbb3922fbe57672fc02

Maintenance freshness

8/5/2026

Usage

6 downloads ยท 170 views

File structure

๐Ÿ“„ SKILL.md