render-monitor

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates service management through the official render CLI, covering operations such as log streaming, database connectivity, and SSH access.- [EXTERNAL_DOWNLOADS]: Configuration instructions for the Render MCP server point to the official vendor endpoint at https://mcp.render.com/mcp.- [SAFE]: Credential management practices described in the skill align with industry standards, specifically recommending the use of environment variables or local configuration files over hardcoding secrets.- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface due to its core functionality of processing external logs and database query results.
  • Ingestion points: Service logs from list_logs() and database data from query_render_postgres() (SKILL.md).
  • Boundary markers: Not explicitly defined in the provided instructions.
  • Capability inventory: Subprocess execution via render CLI and direct SQL query capabilities.
  • Sanitization: Relies on standard agent-tool boundary protections.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 01:40 PM