telegraf
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill configures Telegraf to ingest data from multiple external sources, creating a surface where malicious content in those sources could potentially influence an AI agent processing the outputs. * Ingestion points: [[inputs.http]], [[inputs.postgresql]], [[inputs.mysql]], [[inputs.redis]], and [[inputs.prometheus]] in SKILL.md. * Boundary markers: Absent. * Capability inventory: [[inputs.exec]] for shell execution and [[processors.starlark]] for script-based data transformation in SKILL.md. * Sanitization: No explicit sanitization or content filtering is implemented.
- [DYNAMIC_EXECUTION]: The [[processors.starlark]] plugin is utilized in SKILL.md to execute embedded Starlark scripts for real-time metric processing and tagging.
- [COMMAND_EXECUTION]: The skill provides instructions for executing system commands for testing and service management, such as telegraf --test and sudo systemctl restart telegraf. It also uses [[inputs.exec]] to run a local script, /opt/scripts/check_queue_depth.sh.
- [PRIVILEGE_ESCALATION]: The skill includes commands requiring elevated privileges (sudo) and provides instructions for mounting the Docker socket (/var/run/docker.sock) into a container, which is documented alongside a clear security warning regarding its implications.
Audit Metadata