agents-sdk-typescript-otel
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [Secure Configuration Practices]: The skill includes explicit instructions to avoid embedding credentials, API keys, or sensitive data (like tokens and user IDs) in telemetry signals. This aligns with data privacy and security standards.
- [Local Network Binding]: The provided PowerShell script for launching the Aspire Dashboard specifically binds ports to
127.0.0.1. This ensures that the development dashboard and telemetry endpoints are only accessible from the local machine, reducing the risk of unauthorized external access. - [Official Resource Usage]: The skill utilizes official Microsoft Docker images from
mcr.microsoft.comand standard OpenTelemetry packages from the npm registry. These are well-known and reputable sources for software components.
Audit Metadata