skills/szoloth/skills/datadog-analyst/Gen Agent Trust Hub

datadog-analyst

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to Datadog's official API endpoints (api.datadoghq.com) to aggregate product metrics. This is a well-known service and the operations are necessary for the skill's stated purpose of being a Datadog analyst.
  • [COMMAND_EXECUTION]: The skill includes scripts that use fs.writeFileSync to save generated analytics reports to a file path provided via command-line arguments. This file-writing capability is intended for report generation and occurs within the agent's execution environment.
  • [DATA_EXPOSURE]: The skill contains hardcoded lists of internal employee names and email patterns used to filter internal traffic from production metrics. While this exposes internal personnel information, it serves a legitimate functional purpose for accurate data analysis.
  • [REMOTE_CODE_EXECUTION]: The skill instructions suggest running local scripts via npx tsx. This executes local TypeScript files and may download the tsx runner from the official NPM registry if it is not already present, which is standard behavior for Node.js development tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 08:26 PM
Security Audit — agent-trust-hub — datadog-analyst