monitoring-expert
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The reference files contain numerous shell commands for profiling and load testing applications. This includes the use of
clinic.js,py-spy,k6,go tool pprof, andasync-profiler. These are standard utilities for performance analysis and are used appropriately within the skill's context. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the
clinicsuite vianpm install -g clinicto enable Node.js profiling capabilities. This is a well-known performance tool in the Node.js ecosystem. - [CREDENTIALS_UNSAFE]: The alerting configuration documentation includes placeholders for Slack webhooks (
https://hooks.slack.com/...) and PagerDuty service keys (your-key). These are clearly identified as placeholders and do not contain hardcoded credentials. - [SAFE]: The skill explicitly mandates that sensitive data such as passwords, tokens, and PII must not be logged, demonstrating a security-first approach to observability.
Audit Metadata