optimize-trace-observability
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill instructs the agent to interact with trace data via the Coval CLI and API. Importantly, Phase 4 ('Protect Customers') provides explicit instructions to identify and remove sensitive data such as API keys, passwords, credentials, and PII from traces before they are committed or exported. This demonstrates a strong security-first approach to data handling.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external data (STT transcripts and LLM responses), it mandates strict sanitization and bounding of this content to prevent the accidental inclusion of malicious or sensitive data in observability artifacts. The capability is limited to trace enrichment and metric configuration.
- [COMMAND_EXECUTION]: The skill references the use of the Coval CLI for polling and validation. These are standard operations within the author's ecosystem (coval-ai) and are used for verification rather than arbitrary execution.
Audit Metadata