prometheus-config-generator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted user input to generate system configurations using powerful tools. \n- Ingestion points: User-provided requests for Prometheus configuration generation (SKILL.md). \n- Boundary markers: None. The skill does not instruct the agent to distinguish between user data and instructions or to ignore potentially malicious content embedded in the user request. \n- Capability inventory: The skill environment permits the use of Bash, Write, and Edit tools (SKILL.md frontmatter). \n- Sanitization: None. The skill does not define methods or rules to sanitize user input before it is used in configuration generation or shell commands.
Audit Metadata