grafana-dashboards

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard command-line tools curl and jq to interact with the Grafana API and validate JSON payloads. These operations are restricted to dashboard management tasks.
  • [DATA_EXPOSURE]: The instructions correctly advise the use of an environment variable ($TOKEN) for API authentication instead of hardcoding credentials. It accesses local temporary files like /tmp/dash.json for staging data, which is standard practice for CLI workflows.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined parameters to build dashboard JSON. While this represents a theoretical injection surface, the scope is limited to Grafana's structured JSON schema, and the output is intended for manual or automated API submission rather than direct execution by a shell.
  • [EXTERNAL_DOWNLOADS]: References official Grafana documentation and well-known industry resources for schema definitions and API usage. No untrusted scripts or binaries are downloaded.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 09:23 AM