render-monitor
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes potentially untrusted data from service logs and external documentation URLs.
- Ingestion points: The
list_logstool and instructions to fetch and read content fromhttps://render.com/docs/*.mdusingcurlor other HTTP clients inSKILL.mdand referenced files. - Boundary markers: The instructions do not specify delimiting logs or documentation content to prevent the agent from interpreting data as instructions.
- Capability inventory: The agent has access to sensitive tools including
query_render_postgres,list_services, and the ability to executerender sshor other CLI commands. - Sanitization: No mention of filtering, sanitization, or safety-aware parsing for the log data or external document content is provided.
- [EXTERNAL_DOWNLOADS]: The skill retrieves documentation from the official
render.comdomain. These are well-known service resources used to provide current platform guidance to the agent. - [COMMAND_EXECUTION]: The skill relies on the
renderCLI and standard networking tools likecurlto perform monitoring, log retrieval, and documentation fetching, which are core to its intended functionality.
Audit Metadata