victoriatraces-query
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to the VictoriaTraces API at the user-defined
$VM_TRACES_URLto retrieve information about services, operations, and traces. - [COMMAND_EXECUTION]: It utilizes
curlto perform network requests,jqto process JSON telemetry data, and thedatecommand to generate appropriate timestamps for queries. - [PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by processing external trace data from an API.
- Ingestion points: Data enters the context via JSON responses from the
/api/services,/api/traces, and/api/dependenciesendpoints (SKILL.md). - Boundary markers: The skill does not explicitly define delimiters to separate telemetry data from instructions.
- Capability inventory: Capabilities include network requests via
curland data manipulation viajq(SKILL.md). - Sanitization: The skill relies on
jqfor structured data parsing but does not implement content sanitization for string values within the trace data.
Audit Metadata