opentelemetry-collector
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and execute setup scripts from the vendor's official GitHub repository (github.com/coralogix/telemetry-shippers).
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted infrastructure configuration data which presents a surface for indirect prompt injection. 1. Ingestion points: Infrastructure configuration files such as otel-collector*.yaml, values*.yaml, and task-definition*.json (SKILL.md). 2. Boundary markers: Not present. 3. Capability inventory: Shell command execution including kubectl, curl, and wget (references/ops-troubleshooting.md), Helm operations (references/setup-kubernetes.md), and system service management (references/setup-linux-standalone.md). 4. Sanitization: Not applied to configuration inputs.
Audit Metadata