grafana-foundation-sdk

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the Grafana Foundation SDK from the official Grafana organization's NPM registry (@grafana/grafana-foundation-sdk) and GitHub repository (github.com/grafana/grafana-foundation-sdk). These are well-known and reputable sources for monitoring infrastructure tools.
  • [COMMAND_EXECUTION]: Provides standard documentation for package installation using npm, pnpm, and go get. It also includes instructions for executing generator scripts via tsx, which is a common utility for running TypeScript files.
  • [SAFE]: The skill follows security best practices by encouraging explicit version pinning of dependencies (v0.0.16). It implements the builder pattern for dashboard generation, which enhances configuration safety by providing compile-time type checking and reducing the risk of invalid JSON deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 11:58 AM
Security Audit — agent-trust-hub — grafana-foundation-sdk