skills/terminalskills/skills/influxdb/Gen Agent Trust Hub

influxdb

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [CREDENTIALS_UNSAFE]: The Docker deployment command in Task A includes a hardcoded default password (DOCKER_INFLUXDB_INIT_PASSWORD=changeme123). While provided as a setup example, the use of weak default credentials can lead to insecure deployments if users fail to update them.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by facilitating the ingestion and querying of external time-series data.\n
  • Ingestion points: Metric data is ingested via the InfluxDB Write API (Line Protocol) in Task C and retrieved through Flux queries in Tasks D, E, and F.\n
  • Boundary markers: The instructions do not define boundary markers or provide explicit directions for the agent to treat data retrieved from the database as untrusted content.\n
  • Capability inventory: The skill utilizes docker for service deployment, influx CLI for configuration, and curl for interacting with the database API.\n
  • Sanitization: There are no instructions for sanitizing or validating ingested metrics or query results against malicious payloads.\n- [COMMAND_EXECUTION]: The skill involves the execution of shell commands, specifically docker, influx, and curl, to manage database infrastructure and data flow. These operations are aligned with the skill's primary purpose of database administration.\n- [EXTERNAL_DOWNLOADS]: The skill pulls the official influxdb:2.7 image from a public Docker registry. This reference to a well-known service is documented neutrally as a standard deployment step.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 04:24 PM