service-monitoring
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructs the agent to access and modify sensitive system configuration files, including
/opt/homelab/docker/monitoring/prometheus/prometheus.ymlandalertmanager/alertmanager.yml. These files may contain internal network topologies or integration secrets for notification services. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by processing data from external, potentially untrusted sources.
- Ingestion points: The skill retrieves container logs via
homelab_serviceLogsand metrics data throughhomelab_prometheusQuery. - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the logs or metrics.
- Capability inventory: The agent has the ability to restart services (
homelab_serviceRestart) and redeploy containers (homelab_composeUp), which could be triggered by adversarial content in processed data. - Sanitization: There is no mention of sanitizing or escaping the log content before the agent analyzes it.
Audit Metadata