arize-span-routing

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns detected. The skill instructions focus on the legitimate implementation of OpenTelemetry routing for multi-tenant applications.
  • [CREDENTIALS_UNSAFE]: The skill explicitly warns against hardcoding API keys and correctly instructs the agent to read sensitive tokens from environment variables (e.g., os.environ['ARIZE_API_KEY']).
  • [EXTERNAL_DOWNLOADS]: The skill references the arize-otel Python package (version >= 0.11.0), which is the official library provided by the vendor. This is a standard dependency for the described functionality.
  • [DATA_EXFILTRATION]: No unauthorized data transmission was found. The skill is designed to send telemetry (spans) to the user's own Arize spaces and projects based on application metadata.
  • [PROMPT_INJECTION]: No evidence of prompt injection or instructions to bypass safety guidelines. The guidance is technical, restrictive, and focused on maintaining application availability and data isolation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 10:17 PM
Security Audit — agent-trust-hub — arize-span-routing