render-monitor
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates service management through the official
renderCLI, covering operations such as log streaming, database connectivity, and SSH access.- [EXTERNAL_DOWNLOADS]: Configuration instructions for the Render MCP server point to the official vendor endpoint athttps://mcp.render.com/mcp.- [SAFE]: Credential management practices described in the skill align with industry standards, specifically recommending the use of environment variables or local configuration files over hardcoding secrets.- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface due to its core functionality of processing external logs and database query results. - Ingestion points: Service logs from
list_logs()and database data fromquery_render_postgres()(SKILL.md). - Boundary markers: Not explicitly defined in the provided instructions.
- Capability inventory: Subprocess execution via
renderCLI and direct SQL query capabilities. - Sanitization: Relies on standard agent-tool boundary protections.
Audit Metadata