opentelemetry
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download official agents and binaries from established organizations.
- Fetches the Grafana JVM agent from the official Grafana GitHub repository.
- Downloads the OpenTelemetry Collector and Operator configurations from the official OpenTelemetry GitHub repository.
- Uses standard language-specific package registries (npm, PyPI, Go modules) for SDK dependencies.
- [PRIVILEGE_ESCALATION]: The skill includes instructions for running Grafana Beyla using Docker's
--privilegedflag and host PID access. This is a standard requirement for eBPF-based instrumentation tools to monitor network traffic and process execution at the kernel level. - [COMMAND_EXECUTION]: Provides standard shell commands for operational tasks such as environment variable configuration, connectivity testing via
curl, and package installation. These commands use standard parameters and target official endpoints. - [CREDENTIALS_UNSAFE]: The documentation uses illustrative placeholders for instance IDs and API keys. It correctly advises the use of environment variables and Kubernetes Secrets for managing production credentials, adhering to security best practices.
Audit Metadata