sentry-otel-exporter-setup
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the OpenTelemetry Collector binary and configuration templates from the official OpenTelemetry GitHub repository.
- [COMMAND_EXECUTION]: Executes system discovery commands (uname, which), file manipulation commands (tar, chmod), and the downloaded collector binary for configuration validation and service execution.
- [COMMAND_EXECUTION]: Invokes Docker CLI commands to pull images and run containers when the user selects the containerized installation method.
- [DATA_EXPOSURE]: Accesses local configuration files and environment variable files (.env) to configure the exporter; however, it explicitly uses placeholders for sensitive data and instructs the user to provide credentials manually.
- [PROMPT_INJECTION]: Ingests external content from documentation URLs and local project configuration files, which represents a surface for indirect prompt injection.
- Ingestion points: SKILL.md reads from https://raw.githubusercontent.com/open-telemetry/ and local project files (e.g., .env, collector-config.yaml).
- Boundary markers: Absent when retrieving and applying template configurations.
- Capability inventory: File system write access, network operations (curl), and subprocess execution (binary/docker).
- Sanitization: Uses standard string processing (grep, cut) for version parsing but lacks specific sanitization for configuration content.
Audit Metadata