aio-telemetry-setup
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@adobe/aio-lib-telemetrylibrary from the official npm registry and provides Docker commands to pull images from well-known services includinggrafana/otel-lgtm,cloudflare/cloudflared, andngrok/ngrokfor local development purposes. - [CREDENTIALS_UNSAFE]: While the skill mentions environment variables such as
NEW_RELIC_LICENSE_KEYandNGROK_AUTHTOKEN, it correctly uses placeholders and instructs users to store actual secrets in.envfiles, which is a standard and safe practice for secret management. - [COMMAND_EXECUTION]: The skill provides standard command-line instructions for package installation and container orchestration. It responsibly includes a detailed warning section regarding the security implications of using tunneling services (like Cloudflare or ngrok), explicitly stating they should never be used in production due to lack of authentication.
- [DATA_EXFILTRATION]: The skill describes how to export traces, metrics, and logs to observability backends. This telemetry behavior is the primary intended purpose of the skill and follows standard OpenTelemetry protocols, targeting well-known backend endpoints (e.g., New Relic OTLP endpoints).
Audit Metadata