dd-monitors
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the 'pup' command-line tool from the vendor's official GitHub repository as part of the prerequisite setup steps.
- [COMMAND_EXECUTION]: Uses the 'pup' CLI to perform monitor operations including listing, retrieval, creation, and updates.
- [INDIRECT_PROMPT_INJECTION]: Operates on external JSON files to define or update monitors. This creates an ingestion surface for untrusted data that the agent might process.
- Ingestion points: Local JSON configuration files (e.g., monitor.json, downtime.json) referenced in SKILL.md.
- Boundary markers: Absent; files are passed directly to CLI tools.
- Capability inventory: Shell command execution via the 'pup' CLI across multiple operations.
- Sanitization: Relies on the validation performed by the 'pup' CLI tool.
Audit Metadata