pino
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation repository for the Pino logging library. All JavaScript code samples, shell commands for filtering/testing, and configuration snippets are standard for development and operational use, posing no threat to the agent or user environment.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing standard, well-known Pino ecosystem packages via npm and yarn (e.g., pino, pino-pretty, pino-http). These are official or community-vetted packages for the library and do not point to untrusted or malicious sources.
- [CREDENTIALS_UNSAFE]: The skill correctly uses clear placeholders like 'YOUR_API_KEY' and 'YOUR_INGESTION_KEY' in its documentation for external service integrations (e.g., Datadog, LogDNA), which is a safe practice that prevents accidental credential exposure.
- [PRIVILEGE_ESCALATION]: Example configuration for system utilities (like logrotate) mentions 'su root', which is contextually appropriate for the documented task in a Linux environment and does not introduce risk to the agent execution environment.
Audit Metadata