prometheus-configuration
Warn
Audited by Snyk on Aug 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The installation instructions run "helm repo add prometheus-community https://prometheus-community.github.io/helm-charts" and subsequent helm install will fetch Helm charts from that URL and install/run remote code in the target cluster, making it a runtime external dependency that executes remote content.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill repeatedly directs placing Prometheus configuration and rule files under system directories (e.g. /etc/prometheus, /etc/prometheus/rules, /etc/prometheus/targets) and running validation against those paths, which implies modifying system files that typically require elevated privileges and can change the host state.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata