loki
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script (
scripts/logql.sh) to perform Loki API operations. - Evidence: The script utilizes
curlfor API interaction andjqfor response parsing. - Evidence: It uses a
python3one-liner to safely URL-encode LogQL queries, which is correctly implemented to prevent shell injection by passing the query viasys.argv. - [SAFE]: The skill demonstrates legitimate administrative functionality for log management. It connects to a local endpoint (
localhost:3100) to retrieve cluster data as intended. No malicious patterns, obfuscation, or unauthorized access to sensitive files were detected.
Audit Metadata