cx-ai-center
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the vendor-provided
cxCLI toolset (specificallycx ai-centerandcx spans) to manage configurations and query telemetry data. These operations are scoped to the Coralogix platform and follow established security practices, including a requirement for interactive confirmation on destructive actions unless explicitly overridden by the user. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze AI conversation transcripts from telemetry spans, which constitutes a vulnerability surface for untrusted external data.
- Ingestion points: Conversation messages are read from
gen_ai.input.messagesandgen_ai.output.messagestags within GenAI spans as documented inSKILL.mdandreferences/ai-center-queries.md. - Boundary markers: The provided DataPrime query library includes specific filters and logic (e.g., role-based filtering, text-part extraction) to isolate user and assistant turns, helping to mitigate the risk of processing malicious control instructions embedded in the data.
- Capability inventory: The agent has the ability to run telemetry queries and configure AI Center policies. Security is maintained by instructions that require the agent to sample data rather than performing exhaustive scans of untrusted content.
- Sanitization: The skill documentation provides technical guidance on removing system prompts and tool traffic from the analysis context to prevent instruction confusion.
Audit Metadata