skills/grafana/skills/mimir/Gen Agent Trust Hub

mimir

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches Helm charts from Grafana's official GitHub repository (https://grafana.github.io/helm-charts) and utilizes official container images (grafana/mimir:latest). These resources are from the verified vendor and are standard for this application.
  • [CREDENTIALS_UNSAFE]: Configuration examples for S3, Azure, and GCS storage backends correctly use environment variable placeholders (e.g., ${AWS_ACCESS_KEY_ID}, ${AZURE_STORAGE_KEY}) instead of hardcoded secrets, following security best practices for credential management.
  • [COMMAND_EXECUTION]: The skill provides standard operational commands using docker, helm, and kubectl to deploy, configure, and verify the service status. These commands are necessary for the skill's primary purpose of infrastructure orchestration.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes an ingestion surface for metrics via remote_write and OTLP. While the service processes external data, the skill focus is on deployment configuration and uses standard API endpoints (/api/v1/push, /metrics) without exposing unsafe processing paths to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:02 AM
Security Audit — agent-trust-hub — mimir