stream-aggregation-helper
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to an external VictoriaMetrics instance using the user-provided
$VM_METRICS_URL. This is required to fetch cardinality data (Phase 2a) and verify aggregation results (Phase 5). All network activity is directed to endpoints specified by the user.\n- [PROMPT_INJECTION]: The skill processes JSON data from the VictoriaMetrics API, creating a surface for indirect prompt injection.\n - Ingestion points: Metric names, label names, and label values retrieved from the
/api/v1/status/tsdband/api/v1/queryendpoints (Phase 2a).\n - Boundary markers: Absent; the agent interprets the output of the
jqcommand directly.\n - Capability inventory: Command execution via
curlandjqto interact with remote APIs.\n - Sanitization: Absent; the data returned by the API is used directly to calculate cardinality and generate configuration rules without explicit sanitization.
Audit Metadata