sync-dashboards

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local Python scripts (.automation/build_dashboards.py) and Node.js utilities (mega-linter-runner/lib/index.js) to regenerate and upload dashboards. It also runs pytest for verification of the API reporter logic.
  • [DATA_EXFILTRATION]: The skill interacts with authentication credentials stored in the local .env file (such as GRAFANA_TOKEN, DD_TOKEN, ELASTIC_API_KEY, and NEW_RELIC_API_KEY) to facilitate dashboard deployment to well-known monitoring providers like Datadog, New Relic, and Grafana.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes local repository files such as ApiReporter.py and contract.py to identify changes in the metrics payload and update dashboards accordingly.
  • Ingestion points: Source files including megalinter/reporters/ApiReporter.py, .automation/dashboard_builders/contract.py, and the .automation/dashboard_builders/ directory.
  • Boundary markers: No specific delimiters are specified to isolate the content of these ingested files.
  • Capability inventory: The skill utilizes Read, Write, Edit, and Bash tools for file manipulation and script execution.
  • Sanitization: No explicit sanitization or validation logic is defined for the content extracted from the repository files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 06:43 PM