klaviyo-observability
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides implementation templates for standard observability practices, including Prometheus metrics, OpenTelemetry tracing, and structured logging.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill demonstrates security best practices by incorporating a PII-redacting serializer in the pino logger configuration to prevent sensitive data (emails) from being exposed in application logs.
- [REMOTE_CODE_EXECUTION]: The dependencies listed (prom-client, pino, @opentelemetry/api) are industry-standard, well-known libraries from reputable sources.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading existing code and generating instrumentation wrappers. While it manages external data paths (webhooks), the implementation does not introduce significant injection surfaces and includes manual sanitization examples.
Audit Metadata