ebpf-observability
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches command-line utilities (Cilium, Hubble, and Tetragon) and version metadata from the official GitHub repositories of the Cilium project.
- [EXTERNAL_DOWNLOADS]: Configures and installs several Helm charts for observability stacks from well-known services, including Cilium, Grafana, Parca, and Cloudflare.
- [EXTERNAL_DOWNLOADS]: Downloads BPF Type Format (BTF) data from the Aqua Security repository and clones the industry-standard FlameGraph analysis tool from a reputable source.
- [PRIVILEGE_ESCALATION]: The skill uses
sudoto perform essential system configurations, such as mounting the BPF filesystem, enabling the JIT compiler, and installing system headers, which are required for eBPF operations. - [COMMAND_EXECUTION]: Provides numerous shell commands and
bpftracescripts to monitor system calls, network traffic, and disk performance directly within the Linux kernel.
Audit Metadata