skills/jeremylongshore/tons-of-skills-marketplace/setting-up-synthetic-monitoring/Gen Agent Trust Hub
setting-up-synthetic-monitoring
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest monitoring targets from an external configuration file, which creates a standard surface for indirect prompt injection.
- Ingestion points: Monitoring definitions and critical endpoints are read from
${CLAUDE_SKILL_DIR}/monitoring/endpoints.yamlas specified in the SKILL.md prerequisites. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings for the agent when processing the endpoints file.
- Capability inventory: The skill is granted access to file system tools (
Read,Write,Edit,Grep,Glob) and network communication tools (Bash(curl:*),Bash(monitoring:*)) which could be exploited if malicious instructions were injected into the configuration. - Sanitization: The provided initialization script (
setup_monitor.py) focuses on directory creation and basic JSON formatting but does not implement validation or sanitization for the data contained within the monitoring configuration.
Audit Metadata