mimir
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Helm charts from Grafana's official GitHub repository (
https://grafana.github.io/helm-charts) and utilizes official container images (grafana/mimir:latest). These resources are from the verified vendor and are standard for this application. - [CREDENTIALS_UNSAFE]: Configuration examples for S3, Azure, and GCS storage backends correctly use environment variable placeholders (e.g.,
${AWS_ACCESS_KEY_ID},${AZURE_STORAGE_KEY}) instead of hardcoded secrets, following security best practices for credential management. - [COMMAND_EXECUTION]: The skill provides standard operational commands using
docker,helm, andkubectlto deploy, configure, and verify the service status. These commands are necessary for the skill's primary purpose of infrastructure orchestration. - [INDIRECT_PROMPT_INJECTION]: The skill describes an ingestion surface for metrics via
remote_writeand OTLP. While the service processes external data, the skill focus is on deployment configuration and uses standard API endpoints (/api/v1/push,/metrics) without exposing unsafe processing paths to the agent.
Audit Metadata