instrument-observability

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Official Package Integration: The skill installs verified observability and identity packages such as @microsoft/opentelemetry and Azure.Identity from official registries. These packages are essential for implementing OpenTelemetry-based tracing and secure identity management within the Microsoft Agent 365 ecosystem.
  • Automated Instrumentation Logic: It automates the addition of mandatory instrumentation scopes, including InvokeAgentScope and InferenceScope. These components are configured to capture telemetry data required for agent validation and store publishing without compromising existing business logic.
  • Secure Authentication and Token Resolution: The skill implements robust patterns for On-Behalf-Of (OBO) and Service-to-Service (S2S) authentication. It includes scaffolds for managing the Federated Managed Identity (FMI) token chain, correctly emphasizing the use of Managed Identities in production environments while allowing for client-secret fallbacks during local development.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 05:20 PM
Security Audit — agent-trust-hub — instrument-observability