opentelemetry

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official OpenTelemetry Helm charts and Kubernetes Operator manifests from well-known repositories.
  • Evidence: helm repo add open-telemetry https://open-telemetry.github.io/opentelemetry-helm-charts in SKILL.md and references/KUBERNETES.md.
  • Evidence: kubectl apply -f https://github.com/open-telemetry/opentelemetry-operator/releases/latest/download/opentelemetry-operator.yaml in references/INSTRUMENTATION.md.
  • [COMMAND_EXECUTION]: The skill provides instructions and a validation script that execute standard infrastructure management commands (helm, kubectl, curl, yq, otelcol). These are used for deploying, testing, and validating OTel configurations.
  • Evidence: Shell commands in SKILL.md for pod status and log viewing.
  • Evidence: The scripts/validate-otel.sh script automates YAML validation and Helm template rendering.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from Kubernetes logs and events, which represents a potential attack surface if the agent processes malicious strings embedded in application telemetry.
  • Ingestion points: kubectl logs and kubectl get events commands in references/TROUBLESHOOTING.md.
  • Boundary markers: None present in the provided instructions.
  • Capability inventory: The skill has access to shell execution for Kubernetes management tools.
  • Sanitization: No specific filtering or sanitization of ingested log data is described, as is typical for observability tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:11 PM