package-signoz-green
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes the
colors.ymlconfiguration file to drive deployment actions. - Ingestion points:
colors.ymlfile is the primary input processed by thegreenlauncher script. - Boundary markers: No specific delimiters or "ignore embedded instructions" markers are defined for the configuration file content.
- Capability inventory: The skill executes OpenTofu, Ansible, and Docker commands; writes SSH configuration and identity files; and performs network operations via cloud provider APIs (Vultr, DigitalOcean, Cloudflare).
- Sanitization: The instructions recommend kebab-case keys and non-secret values, but the underlying execution logic for parsing is external to the skill files.
- [DYNAMIC_EXECUTION]: The
greenlauncher script dynamically loads its execution logic at runtime. - Evidence: The script uses
babashka.deps/add-depsto fetch and add thesignoz,green, andoncelibraries from GitHub to the classpath. - Evidence: Functions such as
green.cli/run-cliare invoked usingrequiring-resolveafter the libraries are loaded. - [EXTERNAL_DOWNLOADS]: The skill downloads code and binaries from external sources during execution.
- Evidence: The launcher script fetches library dependencies from
github.com/getcolors/repositories using specific Git SHAs. - Evidence: The
histogramQuantilebinary is downloaded from GitHub releases as part of the application setup, as noted inreferences/configuration.md.
Audit Metadata