grafana-dashboards
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard command-line tools
curlandjqto interact with the Grafana API and validate JSON payloads. These operations are restricted to dashboard management tasks. - [DATA_EXPOSURE]: The instructions correctly advise the use of an environment variable (
$TOKEN) for API authentication instead of hardcoding credentials. It accesses local temporary files like/tmp/dash.jsonfor staging data, which is standard practice for CLI workflows. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined parameters to build dashboard JSON. While this represents a theoretical injection surface, the scope is limited to Grafana's structured JSON schema, and the output is intended for manual or automated API submission rather than direct execution by a shell.
- [EXTERNAL_DOWNLOADS]: References official Grafana documentation and well-known industry resources for schema definitions and API usage. No untrusted scripts or binaries are downloaded.
Audit Metadata