otel-instrumentation
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by ingesting and processing telemetry data from the local Kopai backend using the
npx @kopai/clitool. 1. Ingestion points: Data is read from the backend in validation steps described inreferences/validate-traces.md,references/validate-logs.md, andreferences/validate-metrics.md. 2. Boundary markers: The instructions do not define explicit boundary markers or provide the agent with guidance to ignore potentially malicious instructions embedded within the telemetry attributes. 3. Capability inventory: The skill utilizes powerful shell commands such asnpx,curl,kill,grep, andjqacross its reference files to manipulate environment state and validate telemetry. 4. Sanitization: The skill lacks sanitization or structural validation for the telemetry content before it is processed by the agent's logic.\n- [EXTERNAL_DOWNLOADS]: The skill fetches external resources during the instrumentation process. Specifically, inreferences/lang-java.md, it downloads the OpenTelemetry Java agent from the official GitHub repository of the OpenTelemetry organization (github.com/open-telemetry).\n- [DYNAMIC_EXECUTION]: The skill employs runtime instrumentation techniques such as Java agents for bytecode manipulation (references/lang-java.md), Python'sopentelemetry-instrumentpatching (references/lang-python.md), and Node.js experimental loader hooks to intercept module imports (references/lang-nodejs.md).\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands to set up the environment and validate results, includingnpx @kopai/app start,killfor process management (references/validate-shutdown.md), and package manager commands likenpm installandpip install.\n- [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of remote code by downloading the OpenTelemetry Java agent.jarfile from GitHub and running it via thejava -javaagentcommand inreferences/lang-java.md.
Audit Metadata