maple-agent-tracing-llamaindex
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates an instrumentation layer that ingests and processes agent inputs, outputs, and tool results, which are considered untrusted data from an agentic perspective.
- Ingestion points: The skill captures data at the
agent.run()andworkflow.run()boundaries using theopeninference-instrumentation-llama-indexpackage. - Boundary markers: The instructions do not define specific prompt delimiters for the captured data, although this is typical for telemetry instrumentation.
- Capability inventory: The skill possesses the capability to export all captured data to external network endpoints (
ingest.maple.dev) via theOTLPSpanExporter. - Sanitization: The skill documents the ability to use
hide_inputsandhide_outputsconfigurations withinTraceConfigto prevent sensitive content from being captured. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of external dependencies for its tracing functionality.
- Evidence: The documentation specifies installing
llama-index-core,openinference-instrumentation-llama-index,opentelemetry-sdk, andopentelemetry-exporter-otlp-proto-httpvia standard package managers. - Context: These are well-known, industry-standard libraries for AI framework development and OpenTelemetry observability.
Audit Metadata