groq-observability
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and utilizes standard npm packages
groq-sdkandprom-clientfor API interaction and Prometheus metrics collection, which are well-known and appropriate for the stated use case.- [INDIRECT_PROMPT_INJECTION]: The skill instruments API calls by processing response metadata (latency, token counts, and headers) from Groq. While this involves processing external data, the risk is negligible as it focuses on numeric usage metadata rather than parsing prompt content for instructions.- [CREDENTIALS_SAFE]: The implementation instructions correctly advise users to use environment variables (GROQ_API_KEY) for authentication, avoiding the risk of hardcoded secrets.
Audit Metadata