grafana-platform-dashboard
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/grafanadashboard_roundtrip.shusesoccommands to read and writeGrafanaDashboardresources on the cluster based on local files. - [COMMAND_EXECUTION]: The script
scripts/promql_scan_thanos.shexecutesoc execto run commands inside a Thanos pod, facilitating remote query validation. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface (Category 8):
- Ingestion points: The skill reads Grafana dashboard JSON content from local files (
/tmp/workspace) and cluster resources (GrafanaDashboardCRs). - Boundary markers: No delimiters or safety instructions are provided to the agent when processing these inputs.
- Capability inventory: The skill allows writing to the cluster (
oc apply) and executing commands in pods (oc exec). - Sanitization: Input is URL-encoded for queries via
jq, but there is no structural validation or filtering of the dashboard logic or embedded PromQL before cluster interaction.
Audit Metadata