sync-dashboards
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
.automation/build_dashboards.py) and Node.js utilities (mega-linter-runner/lib/index.js) to regenerate and upload dashboards. It also runspytestfor verification of the API reporter logic. - [DATA_EXFILTRATION]: The skill interacts with authentication credentials stored in the local
.envfile (such asGRAFANA_TOKEN,DD_TOKEN,ELASTIC_API_KEY, andNEW_RELIC_API_KEY) to facilitate dashboard deployment to well-known monitoring providers like Datadog, New Relic, and Grafana. - [INDIRECT_PROMPT_INJECTION]: The skill processes local repository files such as
ApiReporter.pyandcontract.pyto identify changes in the metrics payload and update dashboards accordingly. - Ingestion points: Source files including
megalinter/reporters/ApiReporter.py,.automation/dashboard_builders/contract.py, and the.automation/dashboard_builders/directory. - Boundary markers: No specific delimiters are specified to isolate the content of these ingested files.
- Capability inventory: The skill utilizes
Read,Write,Edit, andBashtools for file manipulation and script execution. - Sanitization: No explicit sanitization or validation logic is defined for the content extracted from the repository files.
Audit Metadata