monte-carlo-remediation
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use local CLI tools like
gh,git,dbt, andairflow, as well ascurlto interact with external APIs for remediation purposes. - Evidence: Found in
SKILL.md(Workflow 2 and 3) andreferences/tool-discovery.md. - Mitigations: Detailed safety rails in
references/safety.mdmandate explaining planned actions and obtaining explicit user confirmation before executing any command that triggers a pipeline or modifies data. - [EXTERNAL_DOWNLOADS]: The setup instructions involve fetching configuration for an MCP server and installing the skill from the vendor's repository.
- Evidence:
README.mddocuments adding an MCP server fromhttps://integrations.getmontecarlo.com/mcpand installing the toolkit vianpx skills add monte-carlo-data/mc-agent-toolkit. - Context: These resources are hosted on domains and repositories associated with the skill's author,
monte-carlo-data. - [DATA_EXFILTRATION]: The skill reads alert metadata, table schemas, and warehouse query logs, and can send this information to external services like dbt Cloud or Airflow to facilitate automated fixes.
- Evidence:
SKILL.mddescribes workflows for gathering alert and pipeline context, which is then used to construct API calls viacurlas described inreferences/tool-discovery.md. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it processes data from external sources like automated troubleshooting results and SQL query logs.
- Ingestion points:
SKILL.md(Workflow 1) uses tools likeget_alerts,run_troubleshooting_agent, andget_queries_for_tableto ingest external data. - Boundary markers: Explicit delimiters or instructions to ignore instructions within the ingested data are not present.
- Capability inventory: The skill can execute shell commands (
curl,git,gh,airflow,dbt) and modify incident status or documentation. - Sanitization: No explicit data sanitization or filtering is specified for the content fetched from the Monte Carlo platform or warehouse logs.
Audit Metadata