grafana
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a reference guide for Grafana 13.0.2, covering dashboards, visualizations, and data source integration.
- [EXTERNAL_DOWNLOADS]: Provides instructions to download official Grafana packages from
dl.grafana.comand pull container images from Docker Hub. These are trusted sources for the software being documented. - [COMMAND_EXECUTION]: Includes standard administrative commands for software installation and service management, such as
apt-get,dpkg,systemctl, andbrew. These are appropriate for the skill's purpose as a setup and configuration guide. - [INDIRECT_PROMPT_INJECTION]: The skill describes ingestion points for external logs (Loki) and metrics (Prometheus). While these are surfaces for untrusted data, the skill follows best practices by providing documentation on how to safely handle and visualize this data within the Grafana environment.
- [DATA_EXPOSURE]: Uses standard placeholders for configuration examples (e.g.,
admin,secret,xoxb-...). The documentation correctly identifies these as example values and instructs users to use environment variables for sensitive secrets in production.
Audit Metadata