uptime-kuma
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses python3 -c to execute code snippets that interact with the Uptime Kuma API to list, add, or modify monitors.\n- [EXTERNAL_DOWNLOADS]: Depends on the uptime-kuma-api Python package, which is a standard library for interfacing with Uptime Kuma instances.\n- [DATA_EXFILTRATION]: Connects to the service endpoint at https://uptime.viktorbarzin.me, which corresponds to the author's infrastructure.\n- [PROMPT_INJECTION]: The skill ingests data from the monitoring API, creating a surface for indirect prompt injection if external monitor data is manipulated.\n
- Ingestion points: Monitor data retrieved via api.get_monitors() in SKILL.md enters the agent's context.\n
- Boundary markers: No specific delimiters are used to wrap or isolate the data returned from the API.\n
- Capability inventory: Includes shell execution of Python scripts and the ability to manage monitoring configurations.\n
- Sanitization: No explicit sanitization or validation of the retrieved monitor metadata is performed.
Audit Metadata