cloud-monitoring-promql-query
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill uses gcloud commands to retrieve project configuration and authentication tokens. These operations are standard for interacting with Google Cloud services and are scoped to the project environment.
- External Service Interaction: The skill makes HTTP requests via curl to the official Google Cloud Monitoring API (monitoring.googleapis.com) to retrieve resource descriptors. This is a well-known service and the interaction is required for the skill's purpose.
- Dependency Management: The skill ensures the promql-parser Python package is available, installing it via pip if necessary. This is a common practice for skills requiring specialized parsing libraries.
- Data Processing and Validation: The skill processes user-provided inputs to construct queries and uses a local script (scripts/validate_promql.py) with an AST-based parser to validate the output. This provides a layer of protection against malformed or potentially problematic queries.
Audit Metadata