skills/jeremylongshore/tons-of-skills-marketplace/aggregating-performance-metrics/Gen Agent Trust Hub
aggregating-performance-metrics
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes performance data from external sources that could potentially contain adversarial content designed to influence the agent's behavior.
- Ingestion points: Data is ingested from Prometheus, StatsD, and CloudWatch APIs via the
scripts/metrics_collection.pyscript as documented inscripts/README.md. - Boundary markers: No explicit delimiters or specific 'ignore' instructions are present in the core instructions in
SKILL.mdto protect the agent from processing malicious payloads embedded in metric names or values. - Capability inventory: The skill is granted access to the
Writetool for configuration and dashboard generation, andBashexecution capabilities for processing scripts. - Sanitization: The inclusion of
scripts/metrics_validation.pyfor schema and threshold validation serves as a mitigation layer to ensure data quality and integrity. - [COMMAND_EXECUTION]: The skill utilizes restricted shell commands to execute bundled automation scripts.
- Evidence: The
allowed-toolssection inSKILL.mdpermits the use ofBash(prometheus:*),Bash(metrics:*), andBash(monitoring:*). These tools are used to run the Python scripts described inscripts/README.md(metrics_collection.py,metrics_aggregation.py, etc.) for managing the monitoring lifecycle.
Audit Metadata