configure-trace-metrics
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the OpenAPI specification from the official vendor domain (
api.coval.dev) to ensure API compatibility and reference current resource shapes. - [COMMAND_EXECUTION]: Employs the
covalCLI to perform authentication checks and inventory available agents and metrics. - [PROMPT_INJECTION]: Processes span names and attributes from trace data to propose metric candidates. This represents a potential surface for indirect prompt injection; however, the data is used for structured metric definition rather than executable logic.
Audit Metadata