kubesense-skills
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external observability sources through tools like
search-logs,search-traces, andget-distributed-trace(defined inkubesense-logs/SKILL.mdandkubesense-traces/SKILL.md). This telemetry data, particularly log bodies and span attributes, could contain malicious instructions. The skill provides write capabilities, such ascreate-alertandcreate-dashboard(kubesense-alerts/SKILL.md,kubesense-dashboards/SKILL.md), which could be targeted by such injections. No specific sanitization or boundary marking for ingested telemetry content is explicitly detailed in the instructions. - [EXTERNAL_DOWNLOADS]: The
README.mdandSKILL.mdfiles provide instructions to install the skill set usingnpx skills add kubesense-ai/kubesense-mcp-skills. This targets the vendor's (kubesense-ai) own GitHub repository. Per established rules, this is considered a safe reference to the author's own infrastructure. - [COMMAND_EXECUTION]: The skill includes tools for executing raw database queries, specifically
execute-sql(ClickHouse SQL) andexecute-spl(Log Piped Query Language) inkubesense-sql/SKILL.mdandkubesense-spl/SKILL.md. While these queries are executed on the KubeSense server, they provide the agent with powerful data manipulation and retrieval capabilities within the scope of the observability platform.
Audit Metadata