backend-structured-logging
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions mandate a concise output style with rules such as 'No preamble. No postamble.' and 'Compress output.' These are stylistic guidelines for generating configuration artifacts and do not attempt to override agent safety protocols or system prompts.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill demonstrates secure logging practices by providing patterns to redact sensitive fields (e.g., passwords, tokens, credit card numbers) at the logger boundary. It explicitly warns against logging credentials and recommends using secrets managers.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: No remote code downloads or execution patterns were detected. The skill references well-known, established libraries such as Pino, Serilog, and structlog for implementation.
- [OBFUSCATION]: Several reference files contain a large number of repetitive sections (up to 150 per file). While this data volume is unconventional and complicates auditing, no hidden malicious payloads or obfuscated commands were discovered within the repetitive content.
Audit Metadata