latitude-telemetry
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlto perform connectivity and credential verification against the vendor's ingest endpoint (https://ingest.latitude.so/v1/traces). This probe ensures that the provided API key and project slug are valid before proceeding with code changes. - [EXTERNAL_DOWNLOADS]: Accesses README files and documentation from the author's official GitHub repository (
latitude-dev/latitude-llm) to ensure that the integration guidance remains aligned with the latest SDK versions. - [SAFE]: The skill implements a defensive security posture regarding credential management (Rule 4), explicitly prohibiting the agent from writing sensitive values like
LATITUDE_API_KEYto local environment files, instead requiring the user to perform these actions. - [SAFE]: Performs codebase discovery through non-destructive search commands (grep) to identify LLM SDK usage and existing OpenTelemetry configurations, ensuring that instrumentation is applied correctly and without conflict.
Audit Metadata