otel-ottl
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to interact with and transform external telemetry data such as logs, traces, and metrics, which constitutes an untrusted input surface. * Ingestion points: Telemetry data processed by OpenTelemetry Collector components (
SKILL.md,rules/components.md). * Boundary markers: The documentation does not specify explicit delimiters for untrusted data content within the transformations. * Capability inventory: The OTTL DSL allows for attribute modification, record dropping, and data hashing (rules/function-reference.md). * Sanitization: The skill provides extensive guidance on redacting sensitive information like credentials and private keys (rules/redaction.md). - [EXTERNAL_DOWNLOADS]: The documentation includes links to official OpenTelemetry project resources and developer tools. * Links to the OpenTelemetry Collector Contrib repository on GitHub for specification details. * References an external tool (
ottl.run) for expression testing.
Audit Metadata