time-series-analytics-user
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Docker Compose configuration and template files from the official Intel GitHub repository (
github.com/open-edge-platform). These are public configuration templates and do not contain executable code or sensitive data. This is a safe operation involving a well-known service. - [COMMAND_EXECUTION]: The skill uses standard shell commands (
docker compose,curl,tar) to manage service lifecycle and package user-authored UDFs. These operations are scoped to the microservice's deployment and are common for this type of development tool. - [REMOTE_CODE_EXECUTION]: While the skill downloads configuration from GitHub, it does not involve piped execution (e.g.,
curl | bash). The instructions guide the user to download files and run standard Docker commands manually. - [DATA_EXPOSURE]: The skill instructions explicitly state that no credentials are transmitted. It recommends using
.envfiles for local secret management, which is a security best practice. No sensitive file paths or credentials were found hardcoded in the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes sensor data via UDFs. While this is an ingestion surface, the UDFs are small Python processes running within a containerized environment (Kapacitor), and the instructions include logging and validation steps to ensure data integrity. The attack surface is minimal and results in low risk.
Audit Metadata