synthetic-monitoring-checks

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill imports testing utilities from https://jslib.k6.io/k6-testing/0.6.1/index.js, which is the standard, official library repository for the k6 ecosystem.
  • [DATA_EXFILTRATION]: Performs standard network operations using k6/http for monitoring purposes and interacts with official Grafana Cloud API endpoints (e.g., synthetic-monitoring-api.grafana.net) for check lifecycle management.
  • [CREDENTIALS_UNSAFE]: Provides clear instructions and code examples for using Grafana's secure secrets management system (k6/secrets) to avoid hardcoding sensitive information in scripts.
  • [PROMPT_INJECTION]: The instructions for converting external data sources like OpenAPI specifications into monitoring scripts include security-focused recommendations, such as filtering for safe operations and using dedicated test accounts to minimize risks from untrusted input data.
  • Ingestion points: OpenAPI specs, GraphQL schemas, or Postman collections processed during script generation.
  • Boundary markers: Missing; the skill relies on manual selection of user journeys.
  • Capability inventory: Uses k6/http, k6/browser, and k6/secrets for execution.
  • Sanitization: Recommends manual review and identification of outcome-based journeys rather than automated bulk conversion.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 06:09 AM
Security Audit — agent-trust-hub — synthetic-monitoring-checks