observability
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves auditing and processing telemetry data such as application logs and trace attributes, which could potentially house indirect prompt injection attempts. The skill mitigates this by mandating an 'AI Self-Check' that explicitly prohibits the inclusion of secrets, tokens, or PII in telemetry signals, and by requiring the use of official validation tools like
promtoolandotelcol. - [EXTERNAL_DOWNLOADS]: The skill references versioning data and security advisories from established, well-known technology organizations. Evidence includes links to official GitHub repositories for the Prometheus, OpenTelemetry, and Grafana projects, used specifically for tool compatibility verification and tracking known vulnerabilities like CVE-2026-14199.
Audit Metadata