managing-victorops

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements incident management functionality using the official Splunk On-Call (VictorOps) API at api.victorops.com. This is a well-known service, and the network operations are limited to its official domain.
  • [COMMAND_EXECUTION]: The skill uses curl and jq within bash scripts to interact with the VictorOps API. These commands are restricted to the primary purpose of incident management and use environment variables for authentication rather than hardcoded secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes incident data and alert rules that could originate from external sources.
  • Ingestion points: API responses from api.victorops.com containing incident messages and timeline transitions (referenced in SKILL.md).
  • Boundary markers: Absent.
  • Capability inventory: Shell tool access for curl and jq operations.
  • Sanitization: The skill relies on standard jq parsing for structured data extraction.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 08:58 AM