monitoring-expert

Pass

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The reference files contain numerous shell commands for profiling and load testing applications. This includes the use of clinic.js, py-spy, k6, go tool pprof, and async-profiler. These are standard utilities for performance analysis and are used appropriately within the skill's context.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the clinic suite via npm install -g clinic to enable Node.js profiling capabilities. This is a well-known performance tool in the Node.js ecosystem.
  • [CREDENTIALS_UNSAFE]: The alerting configuration documentation includes placeholders for Slack webhooks (https://hooks.slack.com/...) and PagerDuty service keys (your-key). These are clearly identified as placeholders and do not contain hardcoded credentials.
  • [SAFE]: The skill explicitly mandates that sensitive data such as passwords, tokens, and PII must not be logged, demonstrating a security-first approach to observability.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 27, 2026, 07:23 AM