metergraph-onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read external data such as trace content and metadata using tools like
metergraph_get_traceandmetergraph_query_traces. This data originates from external application logs and could contain malicious instructions designed to influence the agent's behavior. - Ingestion points: Found in
SKILL.mdvia calls to MCP tools that retrieve trace information. - Boundary markers: The skill does not define specific delimiters for untrusted trace content.
- Capability inventory: The agent uses MCP tools and standard shell commands to interact with the environment.
- Sanitization: No explicit sanitization or filtering of trace content is mentioned before the agent processes it.
- [COMMAND_EXECUTION]: The skill describes the execution of local binaries and CLI tools, such as
./bin/start,./bin/status, andmetergraph-cli. These represent standard usage of vendor-provided infrastructure for the MeterGraph platform. - [EXTERNAL_DOWNLOADS]: The instructions involve downloading and verifying "released bundles" and specific package versions like
metergraph-cli@0.1.0from the vendor's official distribution channels.
Audit Metadata