monte-carlo-prevent
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the official Monte Carlo integration endpoint at
https://integrations.getmontecarlo.com/mcp/via a dedicated MCP server. This communication is restricted to fetching data observability metadata such as schema details, table lineage, and active alerts. - [COMMAND_EXECUTION]: The skill references the use of the
montecarloCLI tool for applying monitor-as-code configurations and provides acurlcommand for verifying network connectivity to the vendor's API. These operations are legitimate developer utilities associated with the skill's stated purpose. - [SAFE]: The skill incorporates robust safety guardrails, specifically a 'Change Impact Assessment' workflow. This workflow forces the agent to analyze the 'blast radius' (downstream dependencies) and check for existing incidents before editing SQL or dbt models, significantly reducing the risk of accidental production data breakage.
- [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized data exfiltration was found. Credential management instructions in the troubleshooting guide correctly recommend the use of environment-specific headers rather than hardcoded secrets.
Audit Metadata