opentelemetry
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing standard configuration and code snippets for distributed tracing and metrics collection using the OpenTelemetry framework.
- [CREDENTIALS_SAFE]: While the skill demonstrates how to configure authentication headers (e.g.,
OTEL_EXPORTER_OTLP_HEADERS), it uses obvious placeholder values likeabc123. It also includes a security best practice warning: "Do not put sensitive data in [Baggage]." - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known packages from the OpenTelemetry project (e.g.,
@opentelemetry/sdk-node,opentelemetry-distro) for installation via official package managers (npm, pip). These are legitimate dependencies for the stated purpose. - [COMMAND_EXECUTION]: The provided commands (e.g.,
npm install,pip install,opentelemetry-bootstrap) are standard procedures for setting up the described observability environment and do not involve unauthorized or malicious operations. - [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. The network configurations target standard local or user-defined telemetry collector endpoints (e.g.,
localhost:4317).
Audit Metadata