truefoundry-monitor

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill fetches and analyzes application logs to diagnose deployment failures.\n
  • Ingestion points: SKILL.md describes fetching logs via the logs skill or direct API (/api/svc/v1/logs/...).\n
  • Boundary markers: None specified for log analysis.\n
  • Capability inventory: The skill executes shell commands via Bash (including curl and tfy-api.sh which interacts with the TrueFoundry API).\n
  • Sanitization: The instructions guide the agent to identify failure causes from logs without explicit instructions to sanitize or ignore potential agent commands within the log text.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions to automatically install the TrueFoundry CLI.\n
  • Evidence: references/prerequisites.md contains a script to check for and install the truefoundry package using pip or uv. The package is version-pinned to 0.5.0.\n- [COMMAND_EXECUTION]: The skill uses a helper script scripts/tfy-api.sh to perform authenticated API requests to the TrueFoundry backend.\n
  • Evidence: SKILL.md and reference files utilize bash $TFY_API_SH for platform interaction.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 03:58 PM