private-connectivity

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous CLI examples using aws, az, gcloud, dig, and nslookup. These are standard tools for provisioning infrastructure-as-code and verifying network configuration. All commands are consistent with the skill's stated purpose of managing cloud connectivity.
  • [EXTERNAL_DOWNLOADS]: Includes a command to install the grafana/grafana-agent using the Helm package manager (references/azure-gcp.md). This targets an official package from the vendor's repository, which is a well-known and trusted source.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions involve the agent ingesting user-supplied configuration data (such as VPC IDs, subscription IDs, and service aliases) and interpolating them into shell commands.
  • Ingestion points: Service names and cloud resource identifiers retrieved from the user or the Grafana Cloud console (SKILL.md, references/aws.md, references/azure-gcp.md).
  • Boundary markers: Absent; the instructions assume the integrity of the data provided during the setup process.
  • Capability inventory: The skill utilizes shell execution for infrastructure management and package installation.
  • Sanitization: Not explicitly performed; the skill relies on the user to provide correct identifiers for their own environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:02 AM