agento11y-prod-setup
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by sampling live agent traffic and conversations to generate recommended production rules and guardrails.
- Ingestion points: The skill uses
gcx agento11y conversations searchandgcx agento11y generations getto read live interaction data from the production stack. - Boundary markers: There are no explicit prompt delimiters mentioned for the sampled traffic data within the instructions.
- Capability inventory: The skill utilizes
Bash,Write, andEdittools. It possesses the capability to create and update stack-level objects (rules, evaluators, and guards) via thegcxCLI. - Sanitization: The skill implements a mandatory manual review process. It drafts configurations to local YAML files and requires an explicit user confirmation for every individual write operation to the production stack.
- [COMMAND_EXECUTION]: The skill uses the
gcx(Grafana Cloud CLI) to perform discovery and apply configuration changes. - The skill instructions emphasize that all connections to the stack must go through the official
gcxtool, which manages authentication securely. - The skill identifies and inventory existing rules and guards using
gcx agento11y evaluators list,rules list, andguards listto avoid duplicate configurations.
Audit Metadata