datadog-cli
Warn
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx @leoflores/datadog-clito download and execute code from an external NPM package. This package is a community-maintained tool, not an official Datadog release. Use ofnpxalso means code is fetched from the registry at runtime. - [COMMAND_EXECUTION]: The skill performs multiple command line operations, including
npxfor CLI execution andjqfor JSON manipulation of dashboard configurations. - [PROMPT_INJECTION]: The skill is vulnerable to Indirect Prompt Injection (Category 8):
- Ingestion points: Data enters the agent via
logs search,logs tail, andlogs patternscommands (defined inSKILL.mdandreferences/logs-commands.md). - Boundary markers: None identified. The instructions do not define delimiters for log content or warn the agent to ignore instructions within the data.
- Capability inventory: The skill has significant capabilities including
dashboards update,dashboards delete, anddashboards create(documented inreferences/dashboards.md). - Sanitization: No evidence of sanitization or validation of log content before it is processed by the agent.
Audit Metadata