dt-obs-extensions

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides various diagnostic commands to help troubleshoot connectivity and system health issues.
  • Evidence: SKILL.md and references/extensions-error-codes.md contain examples for curl, ssh, and WMI queries (e.g., curl -v -k, ssh -vvv, gwmi).
  • Context: These commands are provided for diagnostic purposes and are accompanied by prominent security warnings advising against using insecure flags (-k) or plain-text credentials (-u user:password) in production environments.
  • [PRIVILEGE_ESCALATION]: Documentation includes instructions for granting necessary elevated privileges to specific monitoring extensions.
  • Evidence: Error codes DEC:17D and DEC:1CB in references/extensions-error-codes.md instruct users to add specific extension IDs to the elevated_privileges_extensions list in the extensionuser.conf configuration file.
  • Context: This is a legitimate and documented configuration requirement for Dynatrace extensions that require higher system access (e.g., Active Directory monitoring) to function correctly.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from a separate technical reference file to generate troubleshooting responses.
  • Evidence: SKILL.md instructs the agent to search references/extensions-error-codes.md for specific error codes.
  • Context: The reference file contains static technical documentation. The instruction to search for specific headers and limit context to 50 lines helps ensure the agent retrieves relevant information and reduces the surface area for processing unintended data.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 01:18 PM