vmanomaly-sizing
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Bash commands (
curlandjq) to send workload specifications to the VictoriaMetricsvmanomalysizing API and process the resulting JSON resource estimates. These commands rely on user-defined environment variables such asVM_ANOMALY_URLandVM_CURL_CONFIGfor endpoint targeting and authentication. - [EXTERNAL_DOWNLOADS]: Includes a reference link to the official documentation for
curl.se, a well-known and trusted service, to explain specific command-line flags used for handling HTTP headers safely. - [INDIRECT_PROMPT_INJECTION]: The agent processes JSON output generated by the sizing API to interpret resource needs. This ingestion of external data is a standard functional requirement for sizing tools; the skill mitigates risk by instructing the agent to focus on specific fields and warning against the use of unvalidated coefficients or extrapolation factors.
Audit Metadata