vmanomaly-sizing

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Bash commands (curl and jq) to send workload specifications to the VictoriaMetrics vmanomaly sizing API and process the resulting JSON resource estimates. These commands rely on user-defined environment variables such as VM_ANOMALY_URL and VM_CURL_CONFIG for endpoint targeting and authentication.
  • [EXTERNAL_DOWNLOADS]: Includes a reference link to the official documentation for curl.se, a well-known and trusted service, to explain specific command-line flags used for handling HTTP headers safely.
  • [INDIRECT_PROMPT_INJECTION]: The agent processes JSON output generated by the sizing API to interpret resource needs. This ingestion of external data is a standard functional requirement for sizing tools; the skill mitigates risk by instructing the agent to focus on specific fields and warning against the use of unvalidated coefficients or extrapolation factors.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 02:10 PM