otel-instrumentation

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions for downloading and executing instrumentation scripts and agents from the official OpenTelemetry GitHub repositories.
  • In rules/sdks/dotnet.md, it fetches and runs the otel-dotnet-auto-install.sh script.
  • In rules/sdks/java.md and rules/sdks/scala.md, it downloads the opentelemetry-javaagent.jar to be attached to the JVM at runtime.
  • As these resources are provided by the official OpenTelemetry project (a well-known service), this behavior is consistent with the primary purpose of the skill and follows industry best practices.
  • [COMMAND_EXECUTION]: The documentation includes various shell commands for resolving OTel versions via the GitHub API, installing packages through official package managers (npm, pip, go get, etc.), and configuring the environment for telemetry export.
  • [PRIVILEGE_ESCALATION]: The PHP instrumentation guide in rules/sdks/php.md recommends using sudo to install build-essential packages like gcc, make, and autoconf. This is a standard procedure for compiling the OpenTelemetry PHP extension in a development or production environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 09:04 AM