testland/synthetic-monitor-author
Drafts a synthetic monitor configuration for one critical user journey - picks the platform (Datadog Synthetics, Pingdom, Checkly, New Relic, etc.), authors the scripted-transaction body (Playwright-style for browser checks; HTTP-step for API checks), wires the cadence (typical 1-15 min), defines per-step assertions (DOM presence, API status, response shape) and aggregate alert thresholds (consecutive-failure count + on-call routing). Includes the RUM-coverage gap method for deciding which journeys to monitor: score real-user journeys from RUM / CrUX data by session volume times business value, diff against the existing monitor inventory, and emit a ranked gap list. Use when a critical journey needs continuous-in-production verification per ISTQB-canonical shift-right ("a test approach to test a system continuously in production"), or when synthetic coverage was never systematically derived from real usage data.
70
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md Step 1 “Pick the journey” instructs pulling top RUM/CrUX journey inventory (Datadog RUM/Sentry Performance/GA4+CrUX) and exporting top-50 rows/paths, which are outsider-authored free text (URL paths/transaction names) that the workflow consumes without first selecting a specific item.
Where we found it
app.datadoghq.com
domain · 2 sites
The plugin instructs the agent to navigate to the Datadog RUM Explorer and pull top-50 view paths (URL paths/transaction names), which are outsider-authored free text from real user traffic that the workflow then consumes to build the gap list.
references/rum-source-queries.md
10
https://app.datadoghq.com/rum/explorer
SKILL.md
59
Pull the top ~50 view paths (or transaction names) by session volume from Datadog RUM
chromeuxreport.googleapis.com
domain · 2 sites
The plugin instructs the agent to query the CrUX API for per-URL field data; the URLs in CrUX originate from Chrome users' browsing activity and are outsider-authored content consumed by the workflow.
references/rum-source-queries.md
48
https://chromeuxreport.googleapis.com/v1/records:queryRecord
SKILL.md
59
GA4 + CrUX
sentry.io
domain · 5 sites
The plugin instructs the agent to open Sentry's Performance module (at sentry.io) and export transaction names sorted by throughput; these transaction names are outsider-authored free text from real user traffic consumed by the workflow without sanitization.
references/rum-source-queries.md
30
## Sentry Performance
33
transaction name. Per [Sentry Transaction Summary docs][sentry-txn]
38
[sentry-txn]: https://docs.sentry.[REDACTED]/
SKILL.md
59
Sentry Performance
Line 60
- Audited
- Security analysis