create-dashboard
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
gcxCLI andjqto interact with Grafana APIs, list resources, and perform dashboard operations. These are standard management tasks associated with the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from live Grafana environments which could potentially contain malicious instructions if the source dashboards are compromised.
- Ingestion points: Reads live dashboard configurations and resource manifests using
gcx dashboards getandgcx resources get(SKILL.md, Step 2). - Boundary markers: None present. The instructions do not specify delimiters for the data extracted from JSON fields.
- Capability inventory: The agent has the ability to write files, push resources to Grafana, and execute
gcxcommands (SKILL.md, Steps 5 and 6). - Sanitization: Relies on
jqfor structured extraction but does not explicitly validate the content within the extracted fields. - [DYNAMIC_EXECUTION]: The skill supports a code-generation workflow (
gcx dev generate) for projects using resources-as-code patterns. This involves generating Go source code from templates, which is a standard feature of the developer toolset.
Audit Metadata