skills/jeremylongshore/tons-of-skills-marketplace/setting-up-distributed-tracing/Gen Agent Trust Hub
setting-up-distributed-tracing
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided strings through its initialization script
scripts/setup_jaeger.pyto perform file system operations. - Ingestion points: Untrusted input is received via command-line arguments like
--projectand--outputin the setup script. - Boundary markers: There are no markers or safety instructions to prevent the agent from processing malicious path-based inputs.
- Capability inventory: The skill uses
Bash(cmd:*),Write, andEdittools, while the script performs directory creation and file writes. - Sanitization: The script lacks validation for path traversal, enabling potential file creation outside intended directories if supplied with malicious paths like
../../.
Audit Metadata