observability
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code snippets for integrating third-party observability providers (Langfuse, LangSmith, Helicone) and vendor-specific libraries (@assistant-ui/react-o11y).
- [EXTERNAL_DOWNLOADS]: Mentions installation of standard packages from NPM, such as
langsmith,@langfuse/tracing, and@opentelemetry/sdk-node, as well as vendor packages from the@assistant-uinamespace. These are well-known or official vendor resources. - [DATA_EXFILTRATION]: Documents how to send telemetry and trace data to external observability platforms. This is the primary and stated purpose of the skill, and uses established services (Helicone, Langfuse, LangSmith).
- [COMMAND_EXECUTION]: Provides standard
npm installcommands for package installation. - [CREDENTIALS_UNSAFE]: References environment variables for API keys (e.g.,
HELICONE_API_KEY,LANGFUSE_SECRET_KEY) using safe placeholders without hardcoding sensitive data.
Audit Metadata