slo-manage
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests SLO configuration data from external Grafana instances via the
gcxCLI tool. This represents a potential surface for indirect injection from the data being managed. - Ingestion points: Data is retrieved using
gcx slo definitions getandgcx resources pullas described inSKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded content are defined in the YAML templates or workflow instructions.
- Capability inventory: The skill has the ability to execute
gcxcommands viaBashand manage files using theWriteandEdittools. - Sanitization: The skill does not perform explicit sanitization of the retrieved configuration data.
- [COMMAND_EXECUTION]: The skill uses the
gcxCLI through theBashtool to perform operations such as listing datasources, pushing resource updates, and deleting SLO definitions. These commands are necessary for the skill's functionality and are performed using the vendor's own CLI tool.
Audit Metadata