langchain-otel-observability
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is primarily focused on security and privacy posture. It identifies and mitigates 'Pain Points' (P27, P28) related to data privacy in observability stacks, specifically warning against enabling full prompt capture in multi-tenant environments without redaction.
- [EXTERNAL_DOWNLOADS]: The skill uses
pipto install well-known and trusted OpenTelemetry packages, includingopentelemetry-api,opentelemetry-sdk, andopentelemetry-instrumentation-langchain. These are standard libraries from reputable maintainers. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill correctly instructs the user to use environment variables (e.g.,
OTLP_HEADERS,HONEYCOMB_API_KEY) for sensitive information. - [DATA_EXFILTRATION]: While the skill facilitates data collection for tracing, it includes extensive documentation (
references/prompt-content-policy.md) on how to avoid leaking sensitive data. It provides code examples for redaction middleware to strip PII/PHI and secrets before they reach the observability backend. - [COMMAND_EXECUTION]: The skill uses
Bashtools to install dependencies and run standard Python instrumentation code. All commands are transparent and directly related to the stated purpose of the skill.
Audit Metadata