greptimedb-perses-dashboard
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script,
scripts/save-dashboard.sh, which uses standard utilities such ascurl,jq, andpython3to interact with the GreptimeDB API. This script is used exclusively to upload generated dashboard JSON configurations as requested by the user. - [EXTERNAL_DOWNLOADS]: The instructions direct the agent to fetch existing dashboard definitions and schema information from the GreptimeDB instance's HTTP API (e.g.,
GET /v1/dashboardsandPOST /v1/sql). These downloads are used to ensure the generated dashboards match the actual data structures and naming conventions of the target database. - [DATA_EXFILTRATION]: The skill performs POST requests to the user's GreptimeDB host to save dashboard definitions. While this involves sending data to a remote host, it is the primary intended function of the skill and is directed at the infrastructure provided by the user or defined in the environment.
- [CREDENTIALS_UNSAFE]: The skill manages authentication using the
GREPTIME_AUTHenvironment variable. The instructions correctly advise users on how to provide these credentials for the script's use, following standard security practices for CLI-based integration tools.
Audit Metadata