otel-instrumentation

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by ingesting and processing telemetry data from the local Kopai backend using the npx @kopai/cli tool. 1. Ingestion points: Data is read from the backend in validation steps described in references/validate-traces.md, references/validate-logs.md, and references/validate-metrics.md. 2. Boundary markers: The instructions do not define explicit boundary markers or provide the agent with guidance to ignore potentially malicious instructions embedded within the telemetry attributes. 3. Capability inventory: The skill utilizes powerful shell commands such as npx, curl, kill, grep, and jq across its reference files to manipulate environment state and validate telemetry. 4. Sanitization: The skill lacks sanitization or structural validation for the telemetry content before it is processed by the agent's logic.\n- [EXTERNAL_DOWNLOADS]: The skill fetches external resources during the instrumentation process. Specifically, in references/lang-java.md, it downloads the OpenTelemetry Java agent from the official GitHub repository of the OpenTelemetry organization (github.com/open-telemetry).\n- [DYNAMIC_EXECUTION]: The skill employs runtime instrumentation techniques such as Java agents for bytecode manipulation (references/lang-java.md), Python's opentelemetry-instrument patching (references/lang-python.md), and Node.js experimental loader hooks to intercept module imports (references/lang-nodejs.md).\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands to set up the environment and validate results, including npx @kopai/app start, kill for process management (references/validate-shutdown.md), and package manager commands like npm install and pip install.\n- [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of remote code by downloading the OpenTelemetry Java agent .jar file from GitHub and running it via the java -javaagent command in references/lang-java.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 06:49 AM