datadog-analyser
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by ingesting and analyzing potentially untrusted external data such as logs, events, and monitor descriptions.
- Ingestion points: Data retrieved from Datadog via
pup logs search,pup events search, andpup monitors listas specified inSKILL.md. - Boundary markers: Absent. There are no explicit markers or instructions to isolate analyzed data from the agent's core instructions.
- Capability inventory: The skill has access to
Bash,Write, andEdittools, allowing it to execute commands and modify files based on its analysis. - Sanitization: Absent. The skill does not perform validation or sanitization of the data retrieved from Datadog before processing it.
- [COMMAND_EXECUTION]: The skill uses the
pupCLI (a tool from Datadog Labs) to perform its operations. - The
allowed-toolssection defines numerousBashcommand patterns using thepupexecutable, including wildcard patterns likepup agent *andpup monitors search *, granting the agent broad interaction capabilities with the Datadog API.
Audit Metadata