observability

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes repository content (source code, configuration files, and existing telemetry) to identify observability gaps, which creates a potential surface for indirect prompt injection if the audited data contains malicious instructions.
  • Ingestion points: The skill reads repository files during the 'Audit lens' phase described in SKILL.md.
  • Boundary markers: The skill includes an 'AI Self-Check' and 'Rules' section in SKILL.md to guide the agent, though specific delimiters for external content are not mandated.
  • Capability inventory: The skill utilizes command-line tools like promtool, otelcol, amtool, and jq for configuration validation.
  • Sanitization: The skill relies on external validation tools (e.g., promtool check rules) to verify the integrity and correctness of generated PromQL and configurations.
  • [EXTERNAL_DOWNLOADS]: The references/versions.md file contains links to official GitHub release pages for Prometheus, OpenTelemetry, Grafana, Loki, and Tempo. These references target well-known organizations and are used to verify target versions for instrumentation.
  • [COMMAND_EXECUTION]: The workflow explicitly instructs the agent to run validation commands such as promtool check config, otelcol validate, and amtool check-config to ensure generated observability artifacts are functional before they are returned to the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 08:17 AM
Security Audit — agent-trust-hub — observability