183-java-observability-tracing-opentelemetry

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a best-practice guide for developers. It includes explicit constraints and instructions to prevent data exfiltration and credential exposure, such as the 'NO SENSITIVE DATA' and 'PRIVACY FIRST' rules.
  • [DATA_EXFILTRATION]: No patterns detected. The code examples demonstrate how to avoid leaking sensitive information (like JWT tokens or PII) into telemetry backends.
  • [REMOTE_CODE_EXECUTION]: No suspicious remote code patterns detected. The skill references standard build tools like Maven (mvnw) for verification, which is routine for Java development.
  • [EXTERNAL_DOWNLOADS]: The skill refers to standard OpenTelemetry libraries and uses a conventional OTLP collector endpoint (http://otel-collector:4317) in its configuration examples, which is standard for internal observability infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 01:54 PM
Security Audit — agent-trust-hub — 183-java-observability-tracing-opentelemetry