maple-agent-tracing-openrouter
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the tracing of LLM inputs and outputs, which inherently involves handling untrusted data from model responses.
- Ingestion points: The skill intercepts OpenRouter request bodies and completion responses to extract metadata like
session_idand cost (SKILL.md Step 2, 3). - Boundary markers: No explicit prompt boundary markers are provided in the code snippets.
- Capability inventory: The skill modifies application code to inject headers/body fields and transmits trace data to external endpoints (
ingest.maple.dev). - Sanitization: The instructions recommend enabling 'Privacy Mode' on the destination to prevent prompts and completions from leaving the user's controlled environment (SKILL.md Step 4).
- [DYNAMIC_EXECUTION]: The skill provides logic to wrap the global
fetchfunction or modify request bodies at runtime to inject tracing metadata. - The TypeScript
openRouterFetchimplementation dynamically parses and re-serializes JSON request bodies during the API call lifecycle (SKILL.md Step 3). - The Python
openrouter_extra_bodyfunction dynamically constructs dictionary objects based on the active OpenTelemetry span context to parent traces correctly (SKILL.md Step 3). - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries and official service endpoints for tracing and LLM communication.
- References official packages including
@opentelemetry/api,openai,@openrouter/sdk, and theopenrouterPyPI package. - Connects to official ingestion endpoints for the Maple service at
ingest.maple.devandingest.eu.maple.dev.
Audit Metadata