observability
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation includes examples of using
curlto query local Prometheus TSDB endpoints for diagnosing metric cardinality issues. These commands are intended for internal troubleshooting within a controlled environment. - [REMOTE_CODE_EXECUTION]: The instructions suggest using
docker runto executeotelcol validateagainst local configuration files. This utilizes the official OpenTelemetry Collector images to verify syntax and component validity as part of a safe systems review workflow. - [CREDENTIALS_UNSAFE]: Example configurations in the evaluation files utilize environment variable interpolation (
${env:APM_TOKEN}) for sensitive tokens, aligning with industry standards for secure secret management rather than hardcoding credentials. - [DATA_EXFILTRATION]: The skill explicitly defines rules and workflows for redacting PII, authorization headers, and other sensitive data within the telemetry pipeline using OpenTelemetry's native processors like
transformandredaction. - [INDIRECT_PROMPT_INJECTION]: The skill prepares the agent to process external configuration and log data by providing strict rules for evidence-based conclusions, boundary markers for signal interpretation, and a requirement to name the specific questions telemetry must answer.
Audit Metadata