collecting-infrastructure-metrics

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process infrastructure metrics from external sources (Prometheus, Datadog, CloudWatch), which constitutes a potential attack surface for indirect prompt injection if external data sources are manipulated.
  • Ingestion points: Performance metrics across compute, storage, network, and container layers from external monitoring platforms.
  • Boundary markers: Not identified in the provided documentation; the instructions do not explicitly state to ignore embedded instructions in the telemetry data.
  • Capability inventory: The skill utilizes bundled Python scripts for agent configuration and dashboard creation, implying file system and API interaction capabilities.
  • Sanitization: No data validation or sanitization protocols are documented in the provided resource descriptions or skill overview.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 08:58 PM