synth-check-status
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
gcxCLI commands. These commands are specific to Grafana's Synthetic Monitoring suite (inventory, status, and timelines) and represent standard vendor-expected functionality. - Evidence:
gcx synthetic-monitoring checks listinSKILL.mdstep 1.gcx synthetic-monitoring checks statusinSKILL.mdstep 2.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external command outputs (
gcxCLI) to present monitoring status to the user. This represents a standard ingestion surface for monitoring skills. - Evidence:
- Step 2 and Step 3 in
SKILL.mdprocess command output for status interpretation and timeline analysis. - No explicit sanitization of tool output is mentioned, which is common for trusted internal CLI tools.
Audit Metadata