aggregating-performance-metrics
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes performance metrics and naming taxonomies from external sources (applications, databases, and infrastructure) to create unified monitoring configurations. This ingestion of untrusted data represents an indirect prompt injection surface where malicious strings in the source systems could attempt to influence the agent's logic.
- Ingestion points: Data enters the agent context from external APIs and SDKs (Prometheus, StatsD, CloudWatch) as described in
scripts/metrics_collection.py. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions to isolate external data from the system prompt.
- Capability inventory: The skill has access to
Bash(scoped to monitoring commands),Write, andReadtools, which could be targeted by an injection attack. - Sanitization: There are no explicit instructions for sanitizing or validating external metric names or values before they are used in configuration files or dashboard definitions.
Audit Metadata