skills/grafana/gcx/slo-check-status/Gen Agent Trust Hub

slo-check-status

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the gcx command-line utility to interface with Grafana services. The tool is used for its intended purpose of listing and checking the status of SLOs.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes output from Grafana, such as SLO names and descriptions, which could theoretically contain malicious instructions.
  • Ingestion points: Workflow steps in SKILL.md ingest data via gcx slo definitions list and gcx slo definitions status commands.
  • Boundary markers: The instructions do not specify the use of delimiters or boundary markers to isolate data returned from the CLI.
  • Capability inventory: The skill is authorized to use the Bash tool to execute gcx commands and query monitoring data.
  • Sanitization: There is no evidence of sanitization or filtering of the content returned by the gcx commands before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:08 AM
Security Audit — agent-trust-hub — slo-check-status