agento11y-instrument
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches instrumentation references and SDK schemas from Grafana's official GitHub repository via
https://raw.githubusercontent.com/grafana/agento11y/main/llms.txt. This is a trusted source provided by the vendor. - [COMMAND_EXECUTION]: The skill uses the
gcxCLI via Bash to manage Grafana Cloud contexts, list stacks, and verify that telemetry data has been successfully ingested into the platform. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and interprets remote content to guide its code modification and execution behavior.
- Ingestion points: Remote content is retrieved using
WebFetchfromllms.txtas defined inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the fetched content.
- Capability inventory: The skill has access to
Edit,Write, andBashtools, allowing it to perform file modifications and command execution based on the external input. - Sanitization: There is no explicit validation or sanitization of the fetched remote content before it influences the agent's actions.
Audit Metadata