grafana-foundation-sdk
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
@grafana/grafana-foundation-sdkTypeScript package and the corresponding Go SDK from official Grafana GitHub repositories, which are recognized as trusted sources for infrastructure tooling. - [INDIRECT_PROMPT_INJECTION]: The skill supports generating dashboard components dynamically from external data sources like service lists. It mitigates potential injection risks by providing specific safety documentation that instructs users to review generated JSON diffs and use human-in-the-loop validation before deployment.
- [CREDENTIALS_SAFE]: The skill explicitly warns against including secrets in prompts or logs and recommends the use of environment files and least-privilege credentials for provisioning, following industry security best practices.
Audit Metadata