maple-agent-tracing-provider-sdks
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates an observability pipeline that ingests and processes untrusted agent conversation data and tool outputs for tracing purposes.
- Ingestion points: Conversation history and tool arguments are captured within the
agent_tracing.pyandagent-tracing.tsfiles (specifically through thehistoryandargumentsparameters). - Boundary markers: There are no explicit prompt isolation or data sanitization mechanisms implemented in the tracing logic to distinguish instructions from diagnostic data.
- Capability inventory: The skill enables tool execution wrappers and exports collected telemetry data to the external endpoint
https://ingest.maple.dev. - Sanitization: The skill provides user configuration via the
OTEL_INSTRUMENTATION_GENAI_CAPTURE_MESSAGE_CONTENTenvironment variable to toggle message content capture. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of standard OpenTelemetry and SDK instrumentation packages from official registries.
- Evidence: The documentation instructs the user to install packages such as
opentelemetry-sdk,opentelemetry-exporter-otlp-proto-http, and SDK-specific instrumentors likeopentelemetry-instrumentation-genai-openai. - [COMMAND_EXECUTION]: The skill provides logic to execute tool functions using model-generated inputs.
- Evidence: The
run_toolfunction inreferences/python.mddynamically calls agent tools by unpacking arguments parsed from model output usingtool(**json.loads(arguments)).
Audit Metadata