synth-investigate-check
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's metadata and instructions are consistent with its stated purpose of monitoring diagnostics and are provided by the official vendor.
- [SAFE]: No obfuscation, data exfiltration, or unauthorized command execution patterns were detected in the instructions or reference files.
- [SAFE]: The skill does not perform any remote code execution or external package installations. All tool usage is limited to the pre-authorized gcx CLI.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes data from external Grafana configurations and metrics.
- Ingestion points: Check status, job names, and metric results retrieved via gcx commands in SKILL.md.
- Boundary markers: The skill does not use specific delimiters or instructions to ignore potential commands within the retrieved data.
- Capability inventory: The agent can execute shell commands via the Bash tool to interact with the Grafana system.
- Sanitization: External data like job names are interpolated directly into command arguments without explicit sanitization, though this is expected for the intended administrative use case.
Audit Metadata