use-gcx
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function is to execute the
gcxcommand-line utility. It performs a wide range of operations including querying telemetry data, managing dashboards, and modifying alert rules. It explicitly instructs the agent to discover commands via help flags and tree structures to ensure accuracy. - [DYNAMIC_EXECUTION]: The skill implements a dynamic context loading pattern where it instructs the agent to retrieve task-specific instructions directly from the
gcxbinary usinggcx agent skills get <name> -otext. This ensures that the instructions the agent follows are always compatible with the version of the tool installed on the system. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple sources, creating a surface for indirect prompt injection.
- Ingestion points: Commands read telemetry data (logs, metrics, traces), dashboard manifests, and large output results stored in temporary "spill files" (
gcx-results-*.json). It also ingests instructions from thegcx agent skillscommand. - Boundary markers: The skill does not define specific prompt delimiters for external content within this file, though it suggests using structured output flags (
--json,--jq). - Capability inventory: The agent has the capability to execute shell commands (
gcx), read/write files via the CLI, and perform network operations through the managed Grafana API. - Sanitization: The skill relies on built-in CLI flags like
--jqfor data transformation andgcx resources validateto check the integrity of manifests before they are pushed.
- Ingestion points: Commands read telemetry data (logs, metrics, traces), dashboard manifests, and large output results stored in temporary "spill files" (
- [EXTERNAL_DOWNLOADS]: The skill documentation guides the user to install the core dependency using
brew install gcx, which is a standard package management operation.
Audit Metadata