nextjs-opentelemetry-instrumentation
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official, well-known packages from the OpenTelemetry project and Vercel. These are standard libraries for distributed tracing and observability.
- [SAFE]: All network endpoints mentioned are either local (localhost:4318), relative (/api/traces), or environment-controlled (OTEL_EXPORTER_OTLP_ENDPOINT). No hardcoded malicious external domains were detected.
- [SAFE]: The code snippets follow security best practices, such as disabling file system instrumentation (@opentelemetry/instrumentation-fs) by default to prevent excessive data collection and resource usage.
- [SAFE]: No signs of prompt injection, data exfiltration, or obfuscation were found in the instructions or code examples.
- [SAFE]: External references to Google Cloud and Vercel are within the scope of legitimate service integration for tracing.
Audit Metadata