agent-observability-replay-trace

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill generates a local Python script (replay_runner.py) based on a provided template and executes it via a subprocess to simulate a trace run. This execution is transparent and includes a mandatory user confirmation gate through the AskUserQuestion tool before the first replay occurs.
  • [DATA_EXFILTRATION]: The skill fetches and emits trace data to Datadog using official libraries (ddtrace) and the datadog-llmo MCP. This behavior is consistent with the skill's purpose as an observability tool and utilizes established vendor infrastructure.
  • [SAFE]: The skill implements best practices for local secret management by using load_dotenv(override=True) to handle environment variables like DD_API_KEY. It also provides explicit warnings to the user about potential side effects, such as model token costs and external system writes, before re-running code locally.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 08:37 AM
Security Audit — agent-trust-hub — agent-observability-replay-trace