prometheus-configuration

Warn

Audited by Snyk on Aug 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.80). The installation instructions run "helm repo add prometheus-community https://prometheus-community.github.io/helm-charts" and subsequent helm install will fetch Helm charts from that URL and install/run remote code in the target cluster, making it a runtime external dependency that executes remote content.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill repeatedly directs placing Prometheus configuration and rule files under system directories (e.g. /etc/prometheus, /etc/prometheus/rules, /etc/prometheus/targets) and running validation against those paths, which implies modifying system files that typically require elevated privileges and can change the host state.

Issues (2)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 22, 2026, 01:20 PM
Issues
2
Security Audit — snyk — prometheus-configuration