dt-upgrade-readiness
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runwithinscripts/collect.pyto executedtctlcommands. These commands are used to query the Dynatrace tenant for configuration and status data relevant to the migration. This behavior is the primary intended purpose of the skill. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdinstructions include commands for the user to download and install thedtctltool from the officialdynatrace-ossGitHub repository (dynatrace-oss/tap/dtctlvia Homebrew orraw.githubusercontent.com/dynatrace-oss/dtctl/main/install.ps1). These downloads originate from a well-known service (GitHub) and target the official organization repository for the tool, which is considered safe behavior for a setup procedure. - [REMOTE_CODE_EXECUTION]: The skill documents the use of
npx skills addandclaude plugin installto add helper plugins. These are standard package management commands for the platform and target the officialdynatracenamespace. - [SAFE]: The skill implements security best practices by resolving and validating the tenant context (
--context) before execution to prevent accidental operations against the wrong environment. It also explicitly notes that the collector performs read-only operations and does not modify tenant configuration.
Audit Metadata