provisioning
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for managing Grafana resources (dashboards, alerts, data sources) using standard infrastructure-as-code (IaC) practices. All instructions align with security best practices for the platform.
- [EXTERNAL_DOWNLOADS]: The skill provides the official installation method for the
gcxCLI via a shell script from the Grafana GitHub organization. This reference targets a well-known technology provider and is documented neutrally as a legitimate dependency. - [COMMAND_EXECUTION]: Contains standard CLI commands for
gcx,terraform, andcurl. These are used for administrative tasks such as pushing configuration manifests, planning infrastructure changes, and interacting with resource APIs. - [REMOTE_CODE_EXECUTION]: Mentions the use of
gcx dev serve --scriptfor local dashboard generation during development. This is a functional feature of the tool and does not involve executing untrusted remote code. - [CREDENTIALS_UNSAFE]: Correctly identifies and instructs the use of service account tokens and
secureJsonDatafor secret management. No hardcoded credentials or insecure credential handling patterns were found.
Audit Metadata