datadog-analyst
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to Datadog's official API endpoints (api.datadoghq.com) to aggregate product metrics. This is a well-known service and the operations are necessary for the skill's stated purpose of being a Datadog analyst.
- [COMMAND_EXECUTION]: The skill includes scripts that use
fs.writeFileSyncto save generated analytics reports to a file path provided via command-line arguments. This file-writing capability is intended for report generation and occurs within the agent's execution environment. - [DATA_EXPOSURE]: The skill contains hardcoded lists of internal employee names and email patterns used to filter internal traffic from production metrics. While this exposes internal personnel information, it serves a legitimate functional purpose for accurate data analysis.
- [REMOTE_CODE_EXECUTION]: The skill instructions suggest running local scripts via
npx tsx. This executes local TypeScript files and may download thetsxrunner from the official NPM registry if it is not already present, which is standard behavior for Node.js development tools.
Audit Metadata