monitoring-setup
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate templates and instructions for production observability. No malicious patterns, persistence mechanisms, or unauthorized privilege escalations were detected. The implementations for logging, metrics, and tracing follow industry standard best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill implements middleware that captures external request metadata, such as HTTP headers and URL paths, to provide context for logs and metrics. This constitutes a standard monitoring attack surface and is implemented with appropriate safeguards such as path normalization. * Ingestion points:
LoggingContextMiddlewareinlogging-config-template.py(request headers) andPrometheusMiddlewareinmetrics-config-template.py(URL paths). * Boundary markers: None present in the provided templates. * Capability inventory: The skill uses scopedBash(python:*),Bash(docker:*),Edit, andWritetools for configuration tasks. * Sanitization:PrometheusMiddleware._normalize_pathperforms sanitization by replacing numeric and UUID segments with placeholders to reduce cardinality and mitigate label-based risks.
Audit Metadata