app-observability
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official OpenTelemetry and Grafana instrumentation agents from trusted GitHub repositories (open-telemetry/opentelemetry-java-instrumentation and grafana/grafana-opentelemetry-java).
- [EXTERNAL_DOWNLOADS]: Retrieves the Faro Web SDK from well-known public CDNs (unpkg.com) for frontend monitoring, which is standard practice for web applications.
- [COMMAND_EXECUTION]: Includes routine administrative and setup commands such as package installations (npm, pip, go get), service execution (alloy), and diagnostic checks (curl, jq) to verify OTLP connectivity.
- [CREDENTIALS_SAFE]: Demonstrates secure credential handling by instructing users to use environment variables for sensitive data like 'GRAFANA_CLOUD_API_KEY' and 'OTEL_EXPORTER_OTLP_HEADERS' instead of hardcoding secrets within the scripts or configuration files.
Audit Metadata