agent-observability-replay-trace
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates a local Python script (
replay_runner.py) based on a provided template and executes it via a subprocess to simulate a trace run. This execution is transparent and includes a mandatory user confirmation gate through theAskUserQuestiontool before the first replay occurs. - [DATA_EXFILTRATION]: The skill fetches and emits trace data to Datadog using official libraries (
ddtrace) and thedatadog-llmoMCP. This behavior is consistent with the skill's purpose as an observability tool and utilizes established vendor infrastructure. - [SAFE]: The skill implements best practices for local secret management by using
load_dotenv(override=True)to handle environment variables likeDD_API_KEY. It also provides explicit warnings to the user about potential side effects, such as model token costs and external system writes, before re-running code locally.
Audit Metadata