datadog
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is implemented using only the Ruby standard library (json, net/http, uri, fileutils), which minimizes the attack surface by avoiding third-party gems or external dependencies.
- [SAFE]: Secret management follows industry best practices; API and Application keys are stored in a dedicated configuration directory (~/.config/datadog/) with restricted file permissions (0600), ensuring they are not exposed to other users or committed to version control.
- [SAFE]: All network operations are directed exclusively to the well-known and official Datadog API domain (api.datadoghq.com), with no evidence of data exfiltration to unauthorized third-party servers.
- [SAFE]: The skill's Ruby scripts perform direct API calls and localized file operations without exposing the system to command injection, shell-based attacks, or unauthorized privilege escalation.
Audit Metadata