add-widget
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, data exfiltration, or obfuscation were detected. The skill uses the vendor's own CLI tool for dashboard operations.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
covalCLI commands. It uses variable interpolation for dashboard IDs and widget configurations. - Ingestion points: User-supplied
dashboard-idand widget configuration JSON inSKILL.md. - Boundary markers: Absent.
- Capability inventory: Executes shell commands via the
covalCLI to list, create, and verify dashboard widgets. - Sanitization: None explicitly defined in the skill instructions; the agent is expected to pass user-provided values into the command arguments.
Audit Metadata