gcx-demo
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executegcxCLI commands. These commands are restricted to read-only operations such aslist,get,query, andstatusto showcase Grafana Cloud resources. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including log entries, alert annotations, and AI-generated narratives from Grafana Assistant investigations. While this data could theoretically contain instructions intended to influence the agent, the risk is mitigated by the skill's read-only scope and the nature of the demo context.
- Ingestion points: Data enters the context via
gcx logs query,gcx alert rules list, andgcx assistant investigations get-narrativeoutputs. - Boundary markers: None explicitly defined in the provided instructions for separating command output from narration.
- Capability inventory: The agent has access to
Bashfor command execution andAskUserQuestionfor user interaction. - Sanitization: No specific sanitization or filtering of the CLI output is performed before presentation to the user.
- [SAFE]: The skill identifies as being authored by Grafana and interacts exclusively with Grafana's official
gcxCLI tool. All operations are aligned with the intended purpose of providing a read-only product demonstration.
Audit Metadata