arize-instrumentation

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill retrieves instrumentation documentation, installation instructions, and code snippets from official Arize domains, including arize.com and GitHub repositories under the Arize-ai organization.- [COMMAND_EXECUTION]: The skill interacts with the local environment using the Arize CLI (ax) to configure authentication profiles and verify telemetry connectivity. It also facilitates package installation through standard managers like pip, npm, and go get. It provides instructions for persisting configuration via shell profile modifications, which is standard for developer tooling.- [DATA_EXFILTRATION]: The primary function of the skill is to configure applications to transmit telemetry and tracing data to Arize's ingestion endpoints (otlp.arize.com). While this involves external data transmission, it is the intended and documented behavior of the observability tool.- [SAFE]: The skill demonstrates strong security practices by explicitly forbidding the embedding of literal API keys or secrets in generated code, instead mandating the use of environment variables and the official CLI's secure profile management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 03:07 AM