service-remapping
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches service names, monitor lists, and dashboard titles from the Datadog environment, which provides a surface for indirect instructions if those names contain malicious text.
- Ingestion points: Command outputs from pup apm services list, pup monitors list, and pup dashboards list are processed by the agent.
- Boundary markers: The instructions explicitly require the agent to surface impact previews and obtain user confirmation before executing write operations.
- Capability inventory: The skill can create, update, and delete service remapping rules via the pup CLI tool.
- Sanitization: External data is used as parameters in structured CLI commands rather than being executed as scripts.
- [EXTERNAL_DOWNLOADS]: Installs the pup CLI tool from the datadog-labs/pack Homebrew tap, which is a resource owned by the skill author.
- [COMMAND_EXECUTION]: Executes shell commands using the pup utility to query and manage APM configurations within the Datadog platform.
Audit Metadata