contribute
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and reference documents provide a structured approach for repository contributors, adhering to established project guidelines like AGENTS.md and CONTRIBUTING.md.
- [COMMAND_EXECUTION]: The skill utilizes local development tools including
mise(for build and test automation) andbin/gcx(the project's CLI binary) to perform verification and discovery tasks. These operations are conducted within the local development environment and are consistent with the skill's purpose. - [DATA_EXPOSURE_EXFILTRATION]: The skill includes commands to inspect configuration and API metadata (
bin/gcx config view,bin/gcx api), but these are used for development purposes and do not involve exfiltrating sensitive data to external or untrusted domains. All network interactions target official Grafana infrastructure. - [INDIRECT_PROMPT_INJECTION]: While the skill processes external data such as issue reports and RFCs, it operates within the context of a developer checkout and emphasizes following strict internal privacy and quality rules, maintaining a low risk profile.
Audit Metadata