genai-conformance
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official 'weaver' binaries and 'semantic-conventions' registry definitions from the OpenTelemetry project's GitHub repository. These are stored in a local cache directory (~/.cache/oi-conformance/) for version-pinned conformance testing.
- [COMMAND_EXECUTION]: Uses 'uv run' to execute an orchestration script ('run.py') and provider-specific conformance scripts. These scripts manage mock environments and execute validation commands such as 'weaver registry live-check'.
- [INDIRECT_PROMPT_INJECTION]: The skill processes mock provider responses and GenAI traces. It mitigates potential risks by using deterministic mock data and validating outputs against official OTel JSON schemas.
Audit Metadata