vmanomaly-config

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute curl and jq for API interaction. These commands are used to perform health checks, discover model schemas, and validate configurations against a VictoriaMetrics backend.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates network communication with the API endpoint defined in the VM_ANOMALY_URL variable. This interaction is necessary for the skill's primary function of configuration and validation.
  • [DATA_EXFILTRATION]: Monitoring queries and configuration metadata are transmitted to the user-specified VictoriaMetrics endpoint to profile data and test model performance.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes structured data from external API responses, which influences the agent's workflow and recommendations.
  • Ingestion points: JSON responses from the VictoriaMetrics health, buildinfo, and characteristics APIs (SKILL.md).
  • Boundary markers: None explicitly used during variable interpolation into prompts.
  • Capability inventory: The skill uses Bash(curl:*) and Bash(jq:*) for network operations and data processing.
  • Sanitization: Data is processed through jq, which ensures responses are treated as structured data rather than executable instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 04:06 PM
Security Audit — agent-trust-hub — vmanomaly-config