pagerduty-incidents
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
uvxtool to download and run thepagerduty-mcppackage from the Python Package Index (PyPI). This is a standard and safe method for executing Model Context Protocol (MCP) servers using code from well-known repositories. - [COMMAND_EXECUTION]: The skill executes the
uvx pagerduty-mcpcommand to initialize the server. This command is necessary for the skill's intended functionality. - [PROMPT_INJECTION]: The skill retrieves incident notes and alerts from PagerDuty, which constitutes a potential surface for indirect prompt injection. 1. Ingestion points: External data is ingested through tools like
get_incidentandlist_incident_notes. 2. Boundary markers: No explicit markers are defined in the instructions to delimit external content. 3. Capability inventory: The skill includes write capabilities such asmanage_incidents,add_note_to_incident, andadd_responders. 4. Sanitization: No description of data sanitization or validation is provided for the retrieved PagerDuty content.
Audit Metadata