datadog-metrics
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external monitoring platform, creating a potential surface for indirect prompt injection if the retrieved content is untrusted.
- Ingestion points: The tools
query_metrics,get_metric_metadata, andget_dashboardinSKILL.mdfetch metric names, metadata, and dashboard configurations from the Datadog API. - Boundary markers: The instructions do not define specific delimiters or warnings for the agent to ignore embedded instructions in the retrieved data.
- Capability inventory: The skill is scoped to metric and dashboard operations via the
datadog-mcptransport. It does not possess capabilities for local file system writes, arbitrary shell command execution, or other high-privilege actions. - Sanitization: No explicit validation or filtering logic is specified for the external data before it is presented to the agent.
- [EXTERNAL_DOWNLOADS]: The skill facilitates communication with Datadog's official monitoring services.
- Evidence: The skill connects to the
datadog-mcpserver and defaults to the well-knowndatadoghq.comsite for fetching metrics and dashboard definitions.
Audit Metadata