synth-check-status
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executegcx(Grafana Cloud CLI) commands such aslist,status, andtimeline. This is standard functionality for the Grafana vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from external
gcxcommands, which represents a potential attack surface if monitoring data (like check names or targets) contains malicious instructions. However, the source is restricted to the user's own monitoring infrastructure. - Ingestion points: Command output from
gcx synthetic-monitoring checks list,status, andtimelineinSKILL.md. - Boundary markers: None explicitly defined for tool output.
- Capability inventory:
Bashtool access for executinggcxCLI commands. - Sanitization: The skill relies on standard CLI tool output formatting (JSON/Table) and does not specify additional sanitization steps for the data processed by the agent.
Audit Metadata