synthetic-monitoring-checks
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill imports testing utilities from
https://jslib.k6.io/k6-testing/0.6.1/index.js, which is the standard, official library repository for the k6 ecosystem. - [DATA_EXFILTRATION]: Performs standard network operations using
k6/httpfor monitoring purposes and interacts with official Grafana Cloud API endpoints (e.g.,synthetic-monitoring-api.grafana.net) for check lifecycle management. - [CREDENTIALS_UNSAFE]: Provides clear instructions and code examples for using Grafana's secure secrets management system (
k6/secrets) to avoid hardcoding sensitive information in scripts. - [PROMPT_INJECTION]: The instructions for converting external data sources like OpenAPI specifications into monitoring scripts include security-focused recommendations, such as filtering for safe operations and using dedicated test accounts to minimize risks from untrusted input data.
- Ingestion points: OpenAPI specs, GraphQL schemas, or Postman collections processed during script generation.
- Boundary markers: Missing; the skill relies on manual selection of user journeys.
- Capability inventory: Uses
k6/http,k6/browser, andk6/secretsfor execution. - Sanitization: Recommends manual review and identification of outcome-based journeys rather than automated bulk conversion.
Audit Metadata