maple-agent-tracing-langchain
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install OpenTelemetry and OpenInference instrumentation packages via pip and npm. These include
openinference-instrumentation-langchain,opentelemetry-sdk, and their TypeScript equivalents. These are well-known, standard libraries for AI observability. - [COMMAND_EXECUTION]: The skill provides a Python one-liner in Step 0 to check the versions of installed packages (
python -c "import langchain..."). This is a benign diagnostic command. - [DATA_EXFILTRATION]: The skill's primary function is to capture and export agent conversation data, including transcripts and tool results, to the vendor's platform (
ingest.maple.devoringest.eu.maple.dev). This behavior is transparently documented as the skill's purpose and uses the vendor's own infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted agent conversation data (
input.messages) to generate telemetry. - Ingestion points: Conversation messages are processed by the OTel instrumentation in
tracing.pyandgenai-spans.ts. - Boundary markers: None specific to the message content, as the skill treats them as data to be logged.
- Capability inventory: The skill uses
OTLPSpanExporterto send data to the network. - Sanitization: The skill supports redaction features (
hide_inputs,hide_outputs) provided by theopeninference-instrumentationlibrary to prevent sensitive data exposure.
Audit Metadata