maple-agent-tracing-haystack
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python -cto check for specific library versions and utilizes package managers likepip,uv, orpoetryto install necessary dependencies. - [EXTERNAL_DOWNLOADS]: The skill configures the environment to send telemetry data to the vendor's ingestion endpoints at
https://ingest.maple.devandhttps://ingest.eu.maple.dev. - [DATA_EXFILTRATION]: As a tracing tool, the skill is designed to transmit agent conversation transcripts, tool call arguments, and metadata to an external backend. It includes a
content=Falseconfiguration option to allow users to disable the transmission of PII or prompt content while maintaining metadata visibility. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the agent's message history to generate tracing spans.
- Ingestion points: The
_messagesfunction inmaple_haystack.pyprocessesChatMessageobjects containing user and assistant content. - Boundary markers: None are present; the tracer serializes all provided message content for export.
- Capability inventory: The skill writes a local Python file (
maple_haystack.py), installs packages, and performs network operations via theOTLPSpanExporter. - Sanitization: The skill uses
json.dumpsto serialize message components and tool results before export.
Audit Metadata