observability
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource for observability practices. It contains no executable scripts or malicious instructions.
- [DATA_EXFILTRATION]: The skill actively promotes security by instructing developers to avoid exfiltrating sensitive data. It provides specific guidelines for redacting passwords, tokens, and PII at the source and recommends using allowlists for serialized objects.
- [EXTERNAL_DOWNLOADS]: The skill mentions official, industry-standard packages from the OpenTelemetry project (e.g.,
@opentelemetry/api,@opentelemetry/sdk-node). These are well-known, reputable dependencies. - [COMMAND_EXECUTION]: The provided CLI examples (
node --import,npx tsx) are standard methods for initializing Node.js instrumentation and do not pose a security risk in this context.
Audit Metadata