telemetry-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- PII/EUII Prevention Rules: The skill provides explicit instructions to prevent the emission of personally identifiable information, such as file paths, user names, and connection strings. This proactive approach minimizes the risk of accidental data exposure in public telemetry dashboards.
- Sensitive Data Redaction: It encourages the use of 'valuesToMask' for defense-in-depth, ensuring that sensitive strings like keys and tokens are automatically redacted from error messages and logs.
- Controlled OII Management: The skill defines specific allowed organizational identifiers (OII) and mandates the use of sanitization wrappers like 'TelemetryTrustedValue', ensuring that required data is transmitted securely and according to policy.
- Vendor-Standardized Implementation: The skill correctly utilizes '@microsoft/vscode-azext-utils', an official dependency provided by the author (Microsoft) for standardizing telemetry and error handling behaviors across their extensions.
Audit Metadata