forecast-operational-metrics

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of the Bash tool to manage Python virtual environments and execute forecasting scripts.
  • [EXTERNAL_DOWNLOADS]: The skill installs several standard libraries from the Python Package Index (PyPI), including prophet, statsmodels, pandas, and prometheus-api-client to perform its primary tasks.
  • [DATA_EXFILTRATION]: The skill transmits data to a Grafana API for visualization. It uses a placeholder for the API key in its examples, following standard security practices for documentation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Prometheus and CSV files which could theoretically contain malicious instructions.
  • Ingestion points: Data is ingested via MetricsLoader.load_from_prometheus and load_from_csv in references/EXAMPLES.md.
  • Boundary markers: None identified.
  • Capability inventory: The skill has access to Bash, Write, and Edit tools as defined in SKILL.md.
  • Sanitization: No specific sanitization of metric data is implemented, as it is processed numerically for forecasting models.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 06:35 PM
Security Audit — agent-trust-hub — forecast-operational-metrics