opentelemetry
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes commands to download the OpenTelemetry Collector and various SDK components. These resources are sourced from the official OpenTelemetry GitHub organization and established package registries (PyPI, npm), which are recognized as trusted and well-known services for this technology.
- [COMMAND_EXECUTION]: The provided code snippets and installation instructions (pip, npm, docker, and binary execution) are standard for the purpose of setting up observability infrastructure. The commands are documented transparently and correspond to the skill's primary function.
- [CREDENTIALS_UNSAFE]: The documentation includes examples of how to configure authentication headers and environment variables (e.g.,
OTEL_EXPORTER_OTLP_HEADERS=api-key=secret). These are clearly marked as placeholders or examples for user configuration and do not contain hardcoded sensitive information. - [DATA_EXPOSURE]: The skill demonstrates high awareness of data privacy by explicitly recommending the use of processors (like the
attributesortransformprocessors) to hash or redact sensitive information such as database query text before it is exported to observability backends. - [REMOTE_CODE_EXECUTION]: The maintenance script
scripts/check-updates.pyperforms a safe version check by querying the official PyPI JSON API. It does not execute remote code or perform unauthorized network operations.
Audit Metadata