skills/duthaho/claudekit/logging/Gen Agent Trust Hub

logging

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No prompt injection or behavior override instructions were found in the skill metadata or body.
  • [SAFE]: The skill does not access sensitive local files or hardcoded credentials. It provides mechanisms (regex-based processors and pino redaction) specifically designed to prevent the accidental logging of secrets and PII.
  • [SAFE]: No obfuscated code, hidden characters, or encoded payloads were detected in the instructions or code samples.
  • [SAFE]: All referenced libraries (structlog, pino, fastapi, express, etc.) are well-known, industry-standard packages from trusted registries. No remote script execution (e.g., curl|bash) is present.
  • [SAFE]: The skill does not attempt to escalate privileges or establish persistence on the host system.
  • [SAFE]: While the skill involves processing external data (HTTP request headers and bodies), it follows security best practices by implementing redaction filters and focusing on non-executable metadata for observability purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 02:39 PM
Security Audit — agent-trust-hub — logging