vmanomaly-query
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses which is then used in subsequent tool calls, creating a theoretical injection surface.
- Ingestion points: API responses from
VM_ANOMALY_URLendpoints (SKILL.md). - Boundary markers: No specific delimiters are used in the interpolations.
- Capability inventory: The skill uses
curlfor network requests andjqfor data transformation (SKILL.md). - Sanitization: The skill uses
jqto construct JSON request bodies, which serves as a form of structured data sanitization. - [DATA_EXPOSURE]: The skill interacts with sensitive configuration data but implements robust protections. It provides
jqlogic to explicitly redact user credentials from datasource URLs and advises the use of secure configuration files (VM_CURL_CONFIG) for authentication tokens to avoid exposure in the process list.
Audit Metadata