synthetic-monitoring
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes architecture for "agent-driven first response" workflows where diagnostic AI agents (such as Checkly Rocky or Honeycomb Canvas) ingest production telemetry and runbooks to identify root causes.
- Ingestion points: Production failure telemetry, error messages, and per-probe runbooks defined in
references/platforms-and-ci.md. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided in the implementation examples for data ingested by diagnostic agents.
- Capability inventory: Diagnostic agents described in
SKILL.mdhave the capability to analyze multi-source telemetry and provide root-cause candidates to users. - Sanitization: The implementation patterns do not include explicit sanitization of external telemetry data before it is processed by the diagnostic AI agents.
- [COMMAND_EXECUTION]: The skill provides configuration templates for automated execution of monitoring scripts.
- Evidence:
references/platforms-and-ci.mdcontains a GitHub Actions workflow that executesnpx playwright testand a reporting script vianode scripts/report-synthetic-results.js. These are standard commands for the intended synthetic monitoring purpose. - [EXTERNAL_DOWNLOADS]: The skill references and downloads official automation tools and libraries.
- Evidence: The GitHub Actions workflow in
references/platforms-and-ci.mduses official actions (actions/checkout,actions/setup-node) and installs the Playwright browser automation framework (npx playwright install). These are standard dependencies from trusted sources.
Audit Metadata