vmanomaly-config
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
curlandjqfor API interaction. These commands are used to perform health checks, discover model schemas, and validate configurations against a VictoriaMetrics backend. - [EXTERNAL_DOWNLOADS]: The skill facilitates network communication with the API endpoint defined in the
VM_ANOMALY_URLvariable. This interaction is necessary for the skill's primary function of configuration and validation. - [DATA_EXFILTRATION]: Monitoring queries and configuration metadata are transmitted to the user-specified VictoriaMetrics endpoint to profile data and test model performance.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes structured data from external API responses, which influences the agent's workflow and recommendations.
- Ingestion points: JSON responses from the VictoriaMetrics health, buildinfo, and characteristics APIs (SKILL.md).
- Boundary markers: None explicitly used during variable interpolation into prompts.
- Capability inventory: The skill uses
Bash(curl:*)andBash(jq:*)for network operations and data processing. - Sanitization: Data is processed through
jq, which ensures responses are treated as structured data rather than executable instructions.
Audit Metadata