cx-telemetry-querying
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes telemetry data from Coralogix APIs, which is an untrusted ingestion point. 1. Ingestion points: Observability data retrieved via
cx logs,cx spans,cx metrics, andcx search-fields(SKILL.md). 2. Boundary markers: Absent; the skill does not define specific delimiters or warnings for treating fetched telemetry data as untrusted. 3. Capability inventory: Subprocess execution of thecxCLI tool for querying and field discovery (SKILL.md), and reading local markdown files from thereferences/directory. 4. Sanitization: Absent; the skill does not specify filtering or validation logic for the content of the telemetry data. - [COMMAND_EXECUTION]: The skill instructs the agent to execute a vendor-specific CLI tool (
cx) for metrics discovery, field search, and log/span querying (SKILL.md, references/logs-querying.md). These commands are defined as read-only operations and are central to the skill's functionality.
Audit Metadata