prometheus-configuration
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Helm charts from the Prometheus Community repository at
https://prometheus-community.github.io/helm-charts. This is the official and well-known source for Prometheus ecosystem resources. - [COMMAND_EXECUTION]: Provides standard instructions for infrastructure management using
helm,docker,curl, andpromtool. These are routine administrative commands used for installing, configuring, and validating Prometheus services as intended by the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest content from several internal reference files to provide detailed examples and logic.
- Ingestion points: Reads local files including
resources/implementation-playbook.md,assets/prometheus.yml.template,references/scrape-configs.md,references/recording-rules.md, andscripts/validate-prometheus.sh. - Boundary markers: Absent. The instructions do not specify delimiters to separate the content of these files from the agent's system prompt.
- Capability inventory: The skill has the capability to execute administrative commands via shell (
helm,docker,curl,promtool) as part of the provided setup and validation guides. - Sanitization: Absent. The skill does not explicitly describe sanitization or validation of the content within the referenced files.
Audit Metadata