opentelemetry

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely instructional, providing standard configuration and code snippets for distributed tracing and metrics collection using the OpenTelemetry framework.
  • [CREDENTIALS_SAFE]: While the skill demonstrates how to configure authentication headers (e.g., OTEL_EXPORTER_OTLP_HEADERS), it uses obvious placeholder values like abc123. It also includes a security best practice warning: "Do not put sensitive data in [Baggage]."
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known packages from the OpenTelemetry project (e.g., @opentelemetry/sdk-node, opentelemetry-distro) for installation via official package managers (npm, pip). These are legitimate dependencies for the stated purpose.
  • [COMMAND_EXECUTION]: The provided commands (e.g., npm install, pip install, opentelemetry-bootstrap) are standard procedures for setting up the described observability environment and do not involve unauthorized or malicious operations.
  • [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. The network configurations target standard local or user-defined telemetry collector endpoints (e.g., localhost:4317).
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 01:22 AM