datadog-design-dashboard
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection by processing external data from Datadog dashboards. Ingestion points: Dashboard configurations are fetched using the
pup dashboards getandpup dashboards listcommands inSKILL.md. Boundary markers: There are no specific delimiters or instructions to the agent to ignore potentially malicious commands embedded within dashboard metadata. Capability inventory: The agent has access toShell,Write, andReadtools. Sanitization: No sanitization or validation of the retrieved dashboard data is performed. - [COMMAND_EXECUTION]: The skill utilizes the
Shelltool to executepupCLI commands for listing and fetching dashboard information. - [EXTERNAL_DOWNLOADS]: The skill relies on a non-standard CLI tool named
pupto interact with Datadog. While no installation step is shown, this tool is an unverifiable external dependency as it is not the official Datadog CLI.
Audit Metadata