langchain-otel-observability

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is primarily focused on security and privacy posture. It identifies and mitigates 'Pain Points' (P27, P28) related to data privacy in observability stacks, specifically warning against enabling full prompt capture in multi-tenant environments without redaction.
  • [EXTERNAL_DOWNLOADS]: The skill uses pip to install well-known and trusted OpenTelemetry packages, including opentelemetry-api, opentelemetry-sdk, and opentelemetry-instrumentation-langchain. These are standard libraries from reputable maintainers.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill correctly instructs the user to use environment variables (e.g., OTLP_HEADERS, HONEYCOMB_API_KEY) for sensitive information.
  • [DATA_EXFILTRATION]: While the skill facilitates data collection for tracing, it includes extensive documentation (references/prompt-content-policy.md) on how to avoid leaking sensitive data. It provides code examples for redaction middleware to strip PII/PHI and secrets before they reach the observability backend.
  • [COMMAND_EXECUTION]: The skill uses Bash tools to install dependencies and run standard Python instrumentation code. All commands are transparent and directly related to the stated purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:48 AM
Security Audit — agent-trust-hub — langchain-otel-observability