gnmi-telemetry
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust security controls for network device interaction, such as mandatory TLS encryption and ITSM-gated configuration changes.
- [DATA_EXPOSURE]: Sensitive data like device credentials and private keys are managed through environment variables (GNMI_TARGETS, GNMI_TLS_CLIENT_KEY), which is an industry-standard method for secure secret handling in automation workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill has a low-severity attack surface for indirect prompt injection as it processes untrusted data from network devices. \n- Ingestion points: gnmi_get, gnmi_get_subscription_updates, and gnmi_capabilities tools in SKILL.md. \n- Boundary markers: None explicitly defined to delimit device output. \n- Capability inventory: gnmi_set (write configuration) in SKILL.md. \n- Sanitization: Not explicitly documented for device responses. \n- Note: This is an inherent risk factor for monitoring tools and is handled at the platform layer.
- [COMMAND_EXECUTION]: Configuration changes via gnmi_set are protected by a mandatory ServiceNow Change Request check, requiring the CR to be in the 'Implement' state, which provides a significant layer of operational security and authorization.
Audit Metadata