datasources-provisioning

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with official Grafana infrastructure, including grafana.com, plugins-cdn.grafana.net, and official GitHub repositories under the grafana organization. These are trusted vendor sources used for fetching plugin metadata and configuration schemas.
  • [SAFE]: Credential management follows industry best practices by using environment variable placeholders (e.g., ${API_KEY}) in the generated YAML and Terraform files, preventing the hardcoding of secrets in configuration files.
  • [SAFE]: Network activity is restricted to fetching structured JSON data necessary for the skill's primary function of mapping data source settings, posing no risk of unauthorized data exfiltration or remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 07:11 PM
Security Audit — agent-trust-hub — datasources-provisioning