otel-instrumentation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions for downloading the official OpenTelemetry Java agent from GitHub.\n
- Evidence: A
curlcommand inreferences/sdk-setup-by-language.mdpoints to theopen-telemetryorganization on GitHub for the Java instrumentation agent.\n - The download source is a well-known and reputable organization in the observability space.\n- [INDIRECT_PROMPT_INJECTION]: The skill operates by providing guidance based on user-supplied code and configuration requirements, which constitutes a potential ingestion point for untrusted data.\n
- Ingestion points: User-provided application source code, dependency definitions (e.g., pyproject.toml), and environment configurations.\n
- Boundary markers: Not explicitly defined in the provided documentation files.\n
- Capability inventory: The skill is primarily instructional; no automated execution tools were provided for analysis beyond reference to a local collector script.\n
- Sanitization: Not applicable to instructional documentation.
Audit Metadata