prometheus-configuration
Warn
Audited by Snyk on Apr 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The installation steps include "helm repo add prometheus-community https://prometheus-community.github.io/helm-charts" followed by "helm install", which at runtime fetches remote Helm chart content from https://prometheus-community.github.io/helm-charts and applies those manifests (executing remote code), so this is a runtime external dependency.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs creating and modifying system-level Prometheus configuration and rule files under /etc, deploying services via Helm/Docker Compose, and validating configs (actions that alter machine/cluster state and typically require elevated privileges), so it can push the agent to change the host state.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata