alloy
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions and configuration examples for Grafana Alloy, a legitimate and well-known telemetry collection tool from a trusted organization.
- [SAFE]: External resource references and download links point to official Grafana domains and repositories, including the Grafana Alloy documentation and public module libraries on GitHub.
- [SAFE]: Configuration examples demonstrate secure handling of sensitive information by using environment variables (e.g.,
sys.env("GRAFANA_API_KEY")) rather than hardcoding credentials. - [EXTERNAL_DOWNLOADS]: The skill documents the use of Alloy's modular configuration features, which allow importing logic from Git repositories and HTTP endpoints. These are standard architectural features of the tool and are shown using trusted vendor sources.
- [INDIRECT_PROMPT_INJECTION]: As a telemetry agent, the tool is designed to ingest untrusted data from various sources (logs, metrics, traces). While this constitutes a data ingestion surface, the skill includes examples of parsing and filtering stages that facilitate data sanitization and management.
Audit Metadata