telemetry
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The test suite (
tests/test_telemetry_check.py) invokes thetelemetry-checkscript viasubprocess.runto verify CLI functionality. This is confined to the local development environment and does not execute shell commands or untrusted input. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided Prometheus rules and scrape configuration files. The implementation includes a custom, minimal YAML parser in
scripts/telemetry-checkthat avoids dangerous features of standard parsers, effectively mitigating structural exploitation risks. - [DATA_EXFILTRATION]: The
telemetry-checktool initiates TCP connection attempts to verify the reachability of configured targets. These network operations are limited to connectivity probing and do not involve data transmission to remote endpoints.
Audit Metadata