forecast-operational-metrics
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
Bashtool to manage Python virtual environments and execute forecasting scripts. - [EXTERNAL_DOWNLOADS]: The skill installs several standard libraries from the Python Package Index (PyPI), including
prophet,statsmodels,pandas, andprometheus-api-clientto perform its primary tasks. - [DATA_EXFILTRATION]: The skill transmits data to a Grafana API for visualization. It uses a placeholder for the API key in its examples, following standard security practices for documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Prometheus and CSV files which could theoretically contain malicious instructions.
- Ingestion points: Data is ingested via
MetricsLoader.load_from_prometheusandload_from_csvinreferences/EXAMPLES.md. - Boundary markers: None identified.
- Capability inventory: The skill has access to
Bash,Write, andEdittools as defined inSKILL.md. - Sanitization: No specific sanitization of metric data is implemented, as it is processed numerically for forecasting models.
Audit Metadata