maple-agent-tracing-genkit
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a custom OpenTelemetry
SpanProcessorthat parsesgenkit:inputandgenkit:outputspan attributes at runtime to extract conversation transcripts and tool usage. - Ingestion points: The processor reads from
genkit:inputandgenkit:outputattributes ingenkit-for-maple.ts, which contain raw data from agent interactions. - Boundary markers: No specific boundary markers or 'ignore' instructions are applied to the data being processed, as the processor expects structured JSON content generated by the Genkit framework.
- Capability inventory: The code performs
JSON.parse()on these attributes and re-maps the contents togen_ai.*attributes, which are then transmitted over the network via the OTLP exporter. - Sanitization: The implementation does not sanitize the contents of the messages, reasoning, or tool results before mapping them to the new attributes, as it is designed for high-fidelity tracing.
- [COMMAND_EXECUTION]: The skill provides standard
npminstallation commands for OpenTelemetry and Genkit dependencies. These are standard packages required for the stated functionality. - Evidence:
npm install genkit @opentelemetry/sdk-node @opentelemetry/sdk-trace-base @opentelemetry/exporter-trace-otlp-protoin Step 2. - [DATA_EXPOSURE]: The skill is explicitly designed to export telemetry data (including model prompts, tool arguments, and results) to the Maple ingestion endpoints (
ingest.maple.devoringest.eu.maple.dev). The documentation includes warnings to ensure users do not hardcode private keys and suggests using standard environment variable practices for handling theAuthorizationheader.
Audit Metadata