observability
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository content (source code, configuration files, and existing telemetry) to identify observability gaps, which creates a potential surface for indirect prompt injection if the audited data contains malicious instructions.
- Ingestion points: The skill reads repository files during the 'Audit lens' phase described in
SKILL.md. - Boundary markers: The skill includes an 'AI Self-Check' and 'Rules' section in
SKILL.mdto guide the agent, though specific delimiters for external content are not mandated. - Capability inventory: The skill utilizes command-line tools like
promtool,otelcol,amtool, andjqfor configuration validation. - Sanitization: The skill relies on external validation tools (e.g.,
promtool check rules) to verify the integrity and correctness of generated PromQL and configurations. - [EXTERNAL_DOWNLOADS]: The
references/versions.mdfile contains links to official GitHub release pages for Prometheus, OpenTelemetry, Grafana, Loki, and Tempo. These references target well-known organizations and are used to verify target versions for instrumentation. - [COMMAND_EXECUTION]: The workflow explicitly instructs the agent to run validation commands such as
promtool check config,otelcol validate, andamtool check-configto ensure generated observability artifacts are functional before they are returned to the user.
Audit Metadata