influxdb
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The Docker deployment command in Task A includes a hardcoded default password (
DOCKER_INFLUXDB_INIT_PASSWORD=changeme123). While provided as a setup example, the use of weak default credentials can lead to insecure deployments if users fail to update them.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by facilitating the ingestion and querying of external time-series data.\n - Ingestion points: Metric data is ingested via the InfluxDB Write API (Line Protocol) in Task C and retrieved through Flux queries in Tasks D, E, and F.\n
- Boundary markers: The instructions do not define boundary markers or provide explicit directions for the agent to treat data retrieved from the database as untrusted content.\n
- Capability inventory: The skill utilizes
dockerfor service deployment,influxCLI for configuration, andcurlfor interacting with the database API.\n - Sanitization: There are no instructions for sanitizing or validating ingested metrics or query results against malicious payloads.\n- [COMMAND_EXECUTION]: The skill involves the execution of shell commands, specifically
docker,influx, andcurl, to manage database infrastructure and data flow. These operations are aligned with the skill's primary purpose of database administration.\n- [EXTERNAL_DOWNLOADS]: The skill pulls the officialinfluxdb:2.7image from a public Docker registry. This reference to a well-known service is documented neutrally as a standard deployment step.
Audit Metadata