app-sdk-concepts
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
grafana-app-sdkCLI from the official Grafana GitHub repository (github.com/grafana/grafana-app-sdk). This is a documented developer workflow for installing official tooling from a trusted source. - [COMMAND_EXECUTION]: Provides instructions for standard developer tasks such as
go install,grafana-app-sdk project init, andmakecommands for building and testing applications. These commands are executed within the user's local development context. - [INDIRECT_PROMPT_INJECTION]: As a development guide, the skill facilitates the processing of user-defined CUE schemas and Go code to generate application scaffolding.
- Ingestion points: User-edited CUE files located in the
kinds/directory. - Boundary markers: Standard CLI usage where the user explicitly triggers generation or build steps.
- Capability inventory: Shell execution for
go install,make, and the SDK CLI tools. - Sanitization: Relies on the standard Go toolchain and the Grafana App SDK's own code generation logic to handle schema definitions.
Audit Metadata