observability

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill promotes the use of Apple's unified logging system with strict privacy annotations. It provides specific instructions on using .private(mask: .hash) and avoiding .public for sensitive data like PII, which prevents accidental data exposure in system logs.
  • [SAFE]: The documentation explicitly warns against anti-patterns such as silent log exfiltration. In references/oslogstore.md, it states that log exports should never be uploaded silently and must be user-initiated to comply with GDPR and App Store policies.
  • [SAFE]: The skill provides defensive coding patterns to prevent performance issues and accidental data leaks, such as using @autoclosure in logging wrappers to ensure lazy evaluation and maintaining OS-level privacy protections.
  • [SAFE]: All external tools and libraries mentioned (e.g., MetricKit, OpenTelemetry, Sentry) are industry-standard observability solutions. The skill provides configuration guidance for these tools without including suspicious remote code patterns or unverifiable dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 11:04 AM
Security Audit — agent-trust-hub — observability