faro-setup-web
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the standard setup of frontend observability using Grafana's official SDK. All operations, including file modifications and tool usage, are directly related to the skill's stated purpose.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official
@grafana/faro-*packages and thehistorypackage via standard package managers. It also supports CDN-based installation usingunpkg.com, a well-known service for NPM package delivery. These references target official vendor resources and are considered safe. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform routine developer actions such as project environment detection (usingls,grep), dependency installation, and pull request management withgitand the GitHub CLI (gh). - [INDIRECT_PROMPT_INJECTION]: The skill analyzes project configuration and source files to determine the optimal instrumentation strategy.
- Ingestion points: Reads
package.json, lock files, and application source code files. - Boundary markers: The skill does not explicitly use delimiters for file content ingestion, but instructions provide clear role-based separation and instructions for the agent.
- Capability inventory: Access to file system tools and shell execution (
Bash,Write,Edit). - Sanitization: Implements multiple user confirmation checkpoints (Steps 0h, 1b, 3, 5, 6) ensuring human review before any code is committed or pushed.
Audit Metadata