private-connectivity
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous CLI examples using
aws,az,gcloud,dig, andnslookup. These are standard tools for provisioning infrastructure-as-code and verifying network configuration. All commands are consistent with the skill's stated purpose of managing cloud connectivity. - [EXTERNAL_DOWNLOADS]: Includes a command to install the
grafana/grafana-agentusing the Helm package manager (references/azure-gcp.md). This targets an official package from the vendor's repository, which is a well-known and trusted source. - [INDIRECT_PROMPT_INJECTION]: The skill instructions involve the agent ingesting user-supplied configuration data (such as VPC IDs, subscription IDs, and service aliases) and interpolating them into shell commands.
- Ingestion points: Service names and cloud resource identifiers retrieved from the user or the Grafana Cloud console (SKILL.md, references/aws.md, references/azure-gcp.md).
- Boundary markers: Absent; the instructions assume the integrity of the data provided during the setup process.
- Capability inventory: The skill utilizes shell execution for infrastructure management and package installation.
- Sanitization: Not explicitly performed; the skill relies on the user to provide correct identifiers for their own environment.
Audit Metadata