vendor-otel

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches source code directly from the official OpenTelemetry repository on GitHub (open-telemetry/opentelemetry-js-contrib) using the GitHub API.
  • [COMMAND_EXECUTION]: Utilizes local shell commands including gh, grep, and yarn to automate repository management, dependency removal, and running build/test suites.
  • [DATA_EXPOSURE]: Processes changelogs and source code diffs from external repositories to present them to the user for verification.
  • [SAFE]: The skill implements strong human-in-the-loop controls, explicitly requiring user approval for the implementation plan and the final PR creation. It follows best practices for secret management by not requesting or hardcoding any credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 04:10 AM
Security Audit — agent-trust-hub — vendor-otel