thanos
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard YAML configurations for deploying Thanos components (Sidecar, Query, Store, Compactor, Ruler) using Docker Compose and Kubernetes.
- [SAFE]: External resource references (thanosio/thanos and prom/prometheus) are official, well-known images from reputable sources.
- [SAFE]: Command execution is limited to standard operational tasks such as 'curl' to interact with the local Thanos Query API and 'jq' for processing JSON results.
- [SAFE]: Secret management practices are followed; the S3 configuration uses environment variable placeholders (${AWS_ACCESS_KEY_ID}) and the Kubernetes example demonstrates retrieving configuration from a SecretRef.
Audit Metadata