latitude-telemetry

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes curl to perform connectivity and credential verification against the vendor's ingest endpoint (https://ingest.latitude.so/v1/traces). This probe ensures that the provided API key and project slug are valid before proceeding with code changes.
  • [EXTERNAL_DOWNLOADS]: Accesses README files and documentation from the author's official GitHub repository (latitude-dev/latitude-llm) to ensure that the integration guidance remains aligned with the latest SDK versions.
  • [SAFE]: The skill implements a defensive security posture regarding credential management (Rule 4), explicitly prohibiting the agent from writing sensitive values like LATITUDE_API_KEY to local environment files, instead requiring the user to perform these actions.
  • [SAFE]: Performs codebase discovery through non-destructive search commands (grep) to identify LLM SDK usage and existing OpenTelemetry configurations, ensuring that instrumentation is applied correctly and without conflict.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 03:53 AM