vmanomaly-config

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Bash with curl and jq to interact with the VictoriaMetrics vmanomaly API. These operations are restricted to the functionality described (health checks, configuration validation, and task management) and use secure patterns such as --config for header management and jq --arg for safe JSON construction.
  • [DATA_EXFILTRATION]: While the skill interacts with a network endpoint (VM_ANOMALY_URL), this URL is provided by the user to point to their own VictoriaMetrics instance. The skill includes explicit warnings against printing or creating credential files and uses a secure method (--config) to pass authorization headers, minimizing the risk of accidental exposure.
  • [PROMPT_INJECTION]: No patterns attempting to bypass safety filters or override agent behavior were detected. The instructions are focused on technical configuration tasks.
  • [SAFE]: External references point to official VictoriaMetrics documentation and standard technological resources. Dependencies on local tools like victoriametrics-query are mentioned as optional helpers and are not automatically installed or executed from untrusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 09:59 AM
Security Audit — agent-trust-hub — vmanomaly-config