system-health
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill adheres to security best practices by utilizing environment variables (${DB2i_USER}, ${DB2i_PASS}) for database authentication, ensuring that no sensitive credentials are hardcoded in the tool configuration files.- [COMMAND_EXECUTION]: System monitoring is conducted via the ibmi CLI using predefined SQL statements. The tools use parameterized inputs for filtering results (e.g., :pct_threshold), which is a secure method for passing user-defined values to database queries.- [EXTERNAL_DOWNLOADS]: The skill does not perform any external network requests to download code or dependencies; all operations are performed against the local IBM i database services.- [DATA_EXFILTRATION]: Analysis of the network activity reveals that the skill only establishes connections to the configured database host for retrieving health metrics. There are no patterns suggesting data exfiltration to unauthorized external domains.- [SAFE]: The tool configuration includes the setting 'ignore-unauthorized: true' for the database connection, which disables TLS certificate verification. While this is a deviation from best practices, it is a common configuration in internal environments for managing self-signed certificates and does not represent a malicious behavior in this context.
Audit Metadata