admin
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple external sources which could potentially contain malicious instructions.
- Ingestion points: Reads
journalctllogs containing raw claims from external Identity Providers (IdP), parses externalgrafana.iniconfiguration files, and importsdashboards/overview.jsonvia Terraform. - Boundary markers: None identified; instructions do not include specific delimiters or warnings to ignore embedded content in these data sources.
- Capability inventory: The skill has the capability to execute administrative API commands (POST/DELETE) via
curl, modify infrastructure viaterraform, and read system logs viajournalctl. - Sanitization: No explicit sanitization or validation of the content of the JSON dashboards or IdP claims is described before the agent acts on them.
- [COMMAND_EXECUTION]: The skill uses standard CLI tools to perform administrative tasks.
- Usage of
curlfor interacting with the Grafana Cloud API is expected and utilizes placeholders for credentials. - Usage of
terraformfor resource provisioning is a standard practice for this skill's administrative scope. - Usage of
journalctlfor troubleshooting authentication flows is appropriate for the 'admin' persona. - [SAFE]: The skill demonstrates safe handling of sensitive information.
- Hardcoded secret placeholders: Uses
<grafana-com-api-key>,your_client_secret, andvar.grafana_service_account_tokeninstead of real credentials. - Trusted Sources: All external references target official Grafana domains (
grafana.com,grafana.net) and the official Grafana Terraform provider, which are verified vendor resources.
Audit Metadata