oci-monitoring
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous commands utilizing the official
ociCLI to manage cloud resources, metrics, and logs. - [COMMAND_EXECUTION]: Instructions include the use of
sudoandsystemctlfor the installation and management of the official Oracle Cloud Agent on compute instances, which is standard practice for infrastructure monitoring. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the
oracle-cloud-agentfrom official Oracle repositories via theyumpackage manager. - [PROMPT_INJECTION]: Because the skill enables searching through logs and querying telemetry data, it introduces an indirect prompt injection attack surface where untrusted data (log contents) is ingested into the agent's context. Boundary markers are not explicitly defined in the provided examples, but this is a common characteristic of log-analysis skills.
- [DATA_EXFILTRATION]: The skill contains template examples for Slack and PagerDuty notification endpoints, which are intended for legitimate alerting purposes in an observability context.
Audit Metadata