dt-upgrade-readiness

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run within scripts/collect.py to execute dtctl commands. These commands are used to query the Dynatrace tenant for configuration and status data relevant to the migration. This behavior is the primary intended purpose of the skill.
  • [EXTERNAL_DOWNLOADS]: The SKILL.md instructions include commands for the user to download and install the dtctl tool from the official dynatrace-oss GitHub repository (dynatrace-oss/tap/dtctl via Homebrew or raw.githubusercontent.com/dynatrace-oss/dtctl/main/install.ps1). These downloads originate from a well-known service (GitHub) and target the official organization repository for the tool, which is considered safe behavior for a setup procedure.
  • [REMOTE_CODE_EXECUTION]: The skill documents the use of npx skills add and claude plugin install to add helper plugins. These are standard package management commands for the platform and target the official dynatrace namespace.
  • [SAFE]: The skill implements security best practices by resolving and validating the tenant context (--context) before execution to prevent accidental operations against the wrong environment. It also explicitly notes that the collector performs read-only operations and does not modify tenant configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 04:45 PM
Security Audit — agent-trust-hub — dt-upgrade-readiness