provisioning

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for managing Grafana resources (dashboards, alerts, data sources) using standard infrastructure-as-code (IaC) practices. All instructions align with security best practices for the platform.
  • [EXTERNAL_DOWNLOADS]: The skill provides the official installation method for the gcx CLI via a shell script from the Grafana GitHub organization. This reference targets a well-known technology provider and is documented neutrally as a legitimate dependency.
  • [COMMAND_EXECUTION]: Contains standard CLI commands for gcx, terraform, and curl. These are used for administrative tasks such as pushing configuration manifests, planning infrastructure changes, and interacting with resource APIs.
  • [REMOTE_CODE_EXECUTION]: Mentions the use of gcx dev serve --script for local dashboard generation during development. This is a functional feature of the tool and does not involve executing untrusted remote code.
  • [CREDENTIALS_UNSAFE]: Correctly identifies and instructs the use of service account tokens and secureJsonData for secret management. No hardcoded credentials or insecure credential handling patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:09 PM
Security Audit — agent-trust-hub — provisioning