managing-victorops
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements incident management functionality using the official Splunk On-Call (VictorOps) API at
api.victorops.com. This is a well-known service, and the network operations are limited to its official domain. - [COMMAND_EXECUTION]: The skill uses
curlandjqwithin bash scripts to interact with the VictorOps API. These commands are restricted to the primary purpose of incident management and use environment variables for authentication rather than hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: The skill processes incident data and alert rules that could originate from external sources.
- Ingestion points: API responses from
api.victorops.comcontaining incident messages and timeline transitions (referenced inSKILL.md). - Boundary markers: Absent.
- Capability inventory: Shell tool access for
curlandjqoperations. - Sanitization: The skill relies on standard
jqparsing for structured data extraction.
Audit Metadata