agento11y-prod-setup
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executegcxCLI commands. This is the primary mechanism for interacting with the Grafana Agent Observability stack and is appropriate for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted live traffic data from conversations to recommend security policies. While this presents an attack surface where malicious user input could influence the agent's recommendations, the risk is effectively mitigated by mandatory manual confirmation and a local drafting process.
- Ingestion points: Live conversation data retrieved via
gcx agento11y conversations searchin Step 1. - Boundary markers: None explicitly defined for the processing of conversation text.
- Capability inventory:
Bash(CLI execution),Read(file system access),Write(drafting configurations), andEdittools. - Sanitization: The skill does not explicitly sanitize the raw conversation strings during analysis, but requires an explicit "yes" from the developer before any resulting configuration is applied.
Audit Metadata