logging-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and code snippets for logging best practices, focusing on observability and reliability.
- [DATA_EXFILTRATION]: The skill explicitly includes mechanisms for sanitizing and redacting sensitive data such as passwords, tokens, API keys, and PII before logging, which is a key security feature to prevent sensitive data exposure.
- [EXTERNAL_DOWNLOADS]: All referenced libraries (Winston, structlog, Zap, OpenTelemetry) and Docker images (Elasticsearch, Logstash, Kibana) are official, well-known, and industry-standard tools.
- [COMMAND_EXECUTION]: The TypeScript logger implementation includes a
fatalmethod that callsprocess.exit(1), which is a standard pattern for handling non-recoverable application errors and is appropriate for the context.
Audit Metadata