datadog-logs
Fail
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a command to download and execute the Composio CLI installation script from the vendor's official website using 'curl | bash'.
- [COMMAND_EXECUTION]: The skill relies on executing the 'composio' CLI and standard shell utilities like 'jq' and 'tee' for log processing and workflow automation.
- [PROMPT_INJECTION]: The skill defines workflows that ingest external log data from Datadog, which constitutes an indirect prompt injection surface where log content could influence agent behavior.
- Ingestion points: Datadog log data retrieved via 'DATADOG_SEARCH_LOGS' in 'SKILL.md'.
- Boundary markers: Not present in the provided examples.
- Capability inventory: Local command execution, file system writes via 'tee', and network communication via Slack.
- Sanitization: The examples demonstrate basic JSON parsing but do not include explicit content sanitization for agent consumption.
Recommendations
- HIGH: Downloads and executes remote code from: https://composio.dev/install - DO NOT USE without thorough review
Audit Metadata