dd-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
pupCLI and standard shell utilities likejq,curl, anddateto retrieve and process audit data from Datadog. These commands are clearly documented and aligned with the skill's objective to facilitate security and compliance investigations. - [DATA_EXFILTRATION]: Network communication is restricted to official Datadog domains (
datadoghq.com), which corresponds to the vendor's own infrastructure. The skill appropriately guides users to manage sensitive API and App keys via environment variables or interactive login, adhering to security best practices for credential management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Datadog Audit Logs. Although this data originates from platform activity that could be influenced by external actors, the skill employs structured extraction and specific query patterns to minimize the risk of the agent misinterpreting log entries as instructions.
Audit Metadata