integrate-with-gcx
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a variety of local development tools including
bin/gcx(the project's CLI),mise(a tool manager),go,gofmt,git, andgh. These commands are used to inspect the repository state, build the project, run lints, and execute conformance tests, all within the context of standard software development practices for the Grafana ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process repository contents such as Go source code, markdown documentation, and project configuration files to assist in development tasks. While it ingests external data (the codebase) and has capabilities to modify files, these actions are intended for legitimate contributor workflows and are constrained to the local repository environment.
- [EXTERNAL_DOWNLOADS]: The skill mentions the use of
gitandgh(GitHub CLI) for repository management and PR review. These interactions are directed toward official GitHub services and thegrafanaorganization, which are trusted sources within the provided context and scope of the skill's purpose.
Audit Metadata