datasources-provisioning
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official Grafana infrastructure, including
grafana.com,plugins-cdn.grafana.net, and official GitHub repositories under thegrafanaorganization. These are trusted vendor sources used for fetching plugin metadata and configuration schemas. - [SAFE]: Credential management follows industry best practices by using environment variable placeholders (e.g.,
${API_KEY}) in the generated YAML and Terraform files, preventing the hardcoding of secrets in configuration files. - [SAFE]: Network activity is restricted to fetching structured JSON data necessary for the skill's primary function of mapping data source settings, posing no risk of unauthorized data exfiltration or remote code execution.
Audit Metadata