opentelemetry
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official OpenTelemetry Helm charts and Kubernetes Operator manifests from well-known repositories.
- Evidence:
helm repo add open-telemetry https://open-telemetry.github.io/opentelemetry-helm-chartsinSKILL.mdandreferences/KUBERNETES.md. - Evidence:
kubectl apply -f https://github.com/open-telemetry/opentelemetry-operator/releases/latest/download/opentelemetry-operator.yamlinreferences/INSTRUMENTATION.md. - [COMMAND_EXECUTION]: The skill provides instructions and a validation script that execute standard infrastructure management commands (
helm,kubectl,curl,yq,otelcol). These are used for deploying, testing, and validating OTel configurations. - Evidence: Shell commands in
SKILL.mdfor pod status and log viewing. - Evidence: The
scripts/validate-otel.shscript automates YAML validation and Helm template rendering. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from Kubernetes logs and events, which represents a potential attack surface if the agent processes malicious strings embedded in application telemetry.
- Ingestion points:
kubectl logsandkubectl get eventscommands inreferences/TROUBLESHOOTING.md. - Boundary markers: None present in the provided instructions.
- Capability inventory: The skill has access to shell execution for Kubernetes management tools.
- Sanitization: No specific filtering or sanitization of ingested log data is described, as is typical for observability tools.
Audit Metadata