clade-observability
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate observability patterns for monitoring API usage. It uses standard TypeScript code to wrap Anthropic SDK calls and log metadata including token counts, latency, and estimated costs.
- [INDIRECT_PROMPT_INJECTION]: The skill presents a standard ingestion surface for code modification tasks.
- Ingestion points: The
trackedCreatefunction processesAnthropic.MessageCreateParamsand API responses inSKILL.md. - Boundary markers: None present in the code templates.
- Capability inventory: The skill uses
Read,Write, andEdittools to integrate code into the user's project. - Sanitization: Standard for observability code, no specific sanitization is implemented for the metadata logs.
- [DATA_EXPOSURE_&_EXFILTRATION]: Logging is performed exclusively via
console.logandconsole.error. No sensitive file access or network exfiltration patterns were identified.
Audit Metadata