dashboard-management
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use platform-specific CLI tools such as
pnpm action update-dashboardandpnpm action mutate-dashboardfor dashboard resource management. Themutate-dashboardtool utilizes a restricted domain-specific language (DSL) that the backend parses to apply targeted updates rather than executing arbitrary code. - [PROMPT_INJECTION]: The skill uses a data-driven approach by ingesting schema and templates from an external
<data-dictionary>block to construct SQL panels. While this creates a surface for indirect prompt injection (Category 8), it is consistent with the skill's primary analytical purpose. - Ingestion points: Injected
<data-dictionary>block mentioned in the instructions (SKILL.md). - Boundary markers: No specific delimiters are mandated; the skill suggests using dictionary values verbatim.
- Capability inventory: Access to toolsets for creating and updating SQL-backed dashboards (
update-dashboard,mutate-dashboard,compose-dashboard). - Sanitization: The skill documents that the backend environment performs dry-runs and validation of provider-specific SQL (e.g., BigQuery) before any configuration is persisted.
Audit Metadata