monitoring-observability
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/setup-monitoring-stack.sh generates configuration files (docker-compose.yml, alertmanager.yml) and uses docker-compose to orchestrate service deployment. These are standard automation tasks for infrastructure setup.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes ingestion points for external logs, metrics, and traces. Ingestion points: templates/otel-collector.yaml (receives traces/logs via OTLP, Jaeger, Zipkin) and config/prometheus.yml (scrapes metrics from pods/services). Boundary markers: Absent. Capability inventory: scripts/setup-monitoring-stack.sh (file system writes, Docker Compose orchestration). Sanitization: Absent.
- [PRIVILEGE_ESCALATION]: The deployment script scripts/setup-monitoring-stack.sh applies chmod -R 777 to local data directories. This is a common template pattern to resolve Docker volume permission issues in development but represents a best-practice violation for production environments.
- [CREDENTIALS_UNSAFE]: Documentation and configuration templates include default credentials like admin/admin for Grafana and placeholders for external service keys. The skill explicitly warns against hardcoding secrets in its Pitfalls section.
Audit Metadata