service-remapping
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8).
- Ingestion points: The skill retrieves external data using commands like 'pup monitors list', 'pup dashboards list', and 'pup traces search' (File: SKILL.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the prompts used to process this data.
- Capability inventory: The skill has the ability to create, update, and delete service remapping rules via 'pup apm service-remapping' (File: SKILL.md).
- Sanitization: No sanitization or validation of the retrieved metadata is performed before it is used in the agent's context.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the 'pup' CLI tool from the 'datadog-labs/pack' Homebrew tap. This is an official resource from the vendor and is necessary for the skill's functionality.
- [DATA_EXPOSURE]: The skill interacts with Datadog services and appropriately directs the agent to utilize environment variables ($DD_API_KEY, $DD_APP_KEY) for authentication, which is the standard safe practice for managing API credentials.
Audit Metadata