review-logging-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for implementing structured logging and error handling. Analysis of the instructions and examples revealed no malicious patterns, obfuscation, or unauthorized access attempts.- [DATA_EXFILTRATION]: While the skill guides users on sending logs to external services (e.g., Axiom, PostHog, Sentry), these are established industry tools for observability. The skill includes explicit warnings and code patterns for sanitizing sensitive data (PII) before logging, which aligns with security best practices.- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage API tokens and secrets via environment variables. No hardcoded credentials or insecure storage practices were observed in the documentation or examples.- [PROMPT_INJECTION]: The skill involves analyzing user-provided codebases for review. Ingestion point: User code provided for review. Boundary markers: None specified. Capability inventory: The skill consists of instructional text and contains no executable scripts or system-modifying tools. Sanitization: Instructions recommend sanitizing log content but do not address input code processing. This surface is considered a normal part of the skill's functionality and does not escalate the verdict beyond SAFE.
Audit Metadata