maple-agent-tracing-vercel-ai-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references industry-standard OpenTelemetry and Vercel AI SDK packages. All dependencies originate from trusted organizations and established registries.- [INDIRECT_PROMPT_INJECTION]: Tracing functionality captures user messages and model outputs for monitoring purposes. 1. Ingestion points: Data is captured from generateText and streamText calls. 2. Boundary markers: Data is structured within OpenTelemetry span attributes. 3. Capability inventory: Includes network export to ingest.maple.dev and local package installation. 4. Sanitization: Developers are instructed to use recordInputs: false for privacy and are warned against exposing private keys in the telemetry metadata.- [SAFE]: Credential management practices are secure, recommending environment variables and providing explicit warnings against exposing private ingest keys in client-side code.
Audit Metadata