prometheus-configuration

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The installation commands fetch and install remote executable artifacts (Helm chart and container image) that the skill relies on at runtime — e.g., helm repo add https://prometheus-community.github.io/helm-charts (and pulling prom/prometheus:latest) which will download and execute remote chart/image contents on the target environment.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs creating and modifying configuration and rule files under privileged paths (e.g. /etc/prometheus/*), mounts volumes and runs Helm installs which alter system or cluster state—actions that typically require sudo or elevated privileges and therefore push the agent toward modifying the machine's state.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 06:51 AM