monitoring
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands such as
prometheus --versionandgrafana-server -vto verify the installed versions of monitoring tools. These are informational and do not pose a security risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided application tasks and code contexts, creating an entry point for untrusted data.\n - Ingestion points: User-supplied task descriptions and application requirements entering the agent context, as seen in
evals/evals.json.\n - Boundary markers: Absent. The skill does not use specific delimiters or warnings to handle embedded instructions in the ingested data.\n
- Capability inventory: The skill is limited to providing guidelines and informational version checks, with no capabilities for file modification, network operations, or privilege escalation across its scripts.\n
- Sanitization: Absent. No filtering or validation of external content is performed.
Audit Metadata