dt-obs-extensions
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides various diagnostic commands to help troubleshoot connectivity and system health issues.
- Evidence:
SKILL.mdandreferences/extensions-error-codes.mdcontain examples forcurl,ssh, andWMIqueries (e.g.,curl -v -k,ssh -vvv,gwmi). - Context: These commands are provided for diagnostic purposes and are accompanied by prominent security warnings advising against using insecure flags (
-k) or plain-text credentials (-u user:password) in production environments. - [PRIVILEGE_ESCALATION]: Documentation includes instructions for granting necessary elevated privileges to specific monitoring extensions.
- Evidence: Error codes DEC:17D and DEC:1CB in
references/extensions-error-codes.mdinstruct users to add specific extension IDs to theelevated_privileges_extensionslist in theextensionuser.confconfiguration file. - Context: This is a legitimate and documented configuration requirement for Dynatrace extensions that require higher system access (e.g., Active Directory monitoring) to function correctly.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a separate technical reference file to generate troubleshooting responses.
- Evidence:
SKILL.mdinstructs the agent to searchreferences/extensions-error-codes.mdfor specific error codes. - Context: The reference file contains static technical documentation. The instruction to search for specific headers and limit context to 50 lines helps ensure the agent retrieves relevant information and reduces the surface area for processing unintended data.
Audit Metadata