prometheus-configuration
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill configures Prometheus to automatically discover targets using Kubernetes annotations and file-based service discovery, creating a surface for ingesting untrusted data.
- Ingestion points:
kubernetes_sd_configs(pod/service) andfile_sd_configsinSKILL.md. - Boundary markers: None specified to differentiate between metric data and potential control instructions in the metadata.
- Capability inventory: The skill uses
helm,docker-compose,promtool, andcurlfor infrastructure management and verification. - Sanitization: Employs
relabel_configswith regular expressions for mapping, but these do not provide instruction sanitization. - [COMMAND_EXECUTION]: Provides various CLI commands for system setup, configuration validation, and troubleshooting.
- Evidence: Usage of
helm install,docker compose,promtool check, andcurlfor API status checks inSKILL.md. - [EXTERNAL_DOWNLOADS]: Fetches Prometheus monitoring components from the official Prometheus Community repository.
- Evidence:
helm repo add prometheus-community https://prometheus-community.github.io/helm-chartsinSKILL.md.
Audit Metadata