maple-go-style
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official OpenTelemetry Go SDK packages (
go.opentelemetry.io/otel) through the standardgo gettoolchain. - [CREDENTIALS_UNSAFE]: The bootstrap code includes a placeholder
MAPLE_TESTfor an ingest key. The documentation clarifies that this is intended for public-facing, write-only tokens (ingest keys) similar to a Sentry DSN, used for authenticating telemetry data streams. - [DATA_EXFILTRATION]: The skill configures the application to send traces, logs, and metrics to
ingest.maple.dev. This behavior is the primary intended purpose of the skill and utilizes the author's own infrastructure for telemetry processing. - [INDIRECT_PROMPT_INJECTION]: The templates demonstrate how to capture runtime data, such as an
orderID, within telemetry spans. This creates an ingestion surface for untrusted data into the monitoring context, which is a standard pattern for observability tools and is managed by the SDK's internal handling of attributes.
Audit Metadata