axiom-alerting
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill reads organization IDs and access tokens from ~/.axiom.toml. This information is sent via HTTPS headers to the official Axiom API at api.axiom.co. This is standard, safe behavior for a vendor-specific management tool.
- [EXTERNAL_DOWNLOADS]: The skill performs API requests to Axiom's official domains (api.axiom.co). These interactions are necessary for the skill's functionality and target a trusted, well-known service.
- [COMMAND_EXECUTION]: The skill executes curl, jq, and awk through local scripts. These commands are used solely to facilitate API communication and process JSON responses, posing no security risk in this context.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses. 1. Ingestion points: scripts/monitor-list, scripts/notifier-list, and scripts/monitor-get. 2. Boundary markers: Absent. 3. Capability inventory: Local script execution and network access. 4. Sanitization: Output is processed via jq for structure. Risk is negligible as the data source is the official Axiom service managed by the user.
Audit Metadata