light-production-observability
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a technical checklist and templates for system observability that prioritize security and best practices.
- Credential Security: The skill's guardrails (found in references/security-and-cost-guardrails.md) strictly forbid the logging of access tokens, session IDs, private keys, and other secrets.
- Injection Defense: It provides guidance on sanitizing logs by stripping carriage returns and line feeds, and recommends using JSON encoders to mitigate log injection risks.
- Authoritative References: The methodology is based on recognized industry standards and security resources, such as OpenTelemetry, W3C Trace Context, and the OWASP Logging Cheat Sheet.
- No Risk Patterns: There are no instances of command execution, remote script fetching, or obfuscation within the skill files.
Audit Metadata