prometheus-configuration
Warn
Audited by Snyk on Jul 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The helm repo URL https://prometheus-community.github.io/helm-charts is fetched at installation time (helm repo add / helm install) to retrieve and deploy remote chart content which will execute/instantiate resources in the cluster, so it is a runtime external dependency the skill relies on.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs placing and validating Prometheus configuration and rules under system paths like /etc/prometheus (and uses /etc/... in file-based discovery and TLS paths), which implies modifying system-level files that typically require elevated privileges.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata