Skills
skills/aj-geddes/useful-ai-prompts/infrastructure-monitoring/Gen Agent Trust Hub

infrastructure-monitoring

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill includes hardcoded placeholder credentials and references to sensitive system files used for authentication.
  • Evidence: Hardcoded password auth_password: "secret" in references/alertmanager-configuration.md and SKILL.md.original.
  • Evidence: Reference to Kubernetes service account tokens at /var/run/secrets/kubernetes.io/serviceaccount/token in references/prometheus-configuration.md.
  • [COMMAND_EXECUTION]: Provides shell scripts for deploying monitoring infrastructure and performing health checks.
  • Evidence: references/monitoring-deployment.md contains a script using kubectl to manage cluster namespaces, deployments, and services.
  • Evidence: scripts/health-check.sh provides a shell script for service validation.
  • [PROMPT_INJECTION]: Contains a surface for indirect prompt injection via unvalidated script arguments.
  • Ingestion points: The SERVICE_URL parameter in scripts/health-check.sh accepts external input without validation.
  • Boundary markers: Absent.
  • Capability inventory: The skill has the capability to execute cluster management commands via kubectl and shell commands via provided scripts.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 05:18 PM