netdata-otel-setup
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
sudoto perform administrative tasks such as restarting services (systemctl restart netdata), setting environment variables, and modifying configuration files using Netdata'sedit-configutility. These are standard operations for managing system-level monitoring software. - [DATA_EXPOSURE]: Instructions involve managing SSL/TLS certificates and system configuration files in
/etc/netdata/. The skill includes diagnostic commands to verify file readability for the service user, which is a common troubleshooting practice for monitoring agents. - [PROMPT_INJECTION]: The skill establishes an indirect prompt injection surface by configuring the ingestion of untrusted external data via the OpenTelemetry protocol.
- Ingestion points: OTLP/gRPC network traffic on port 4317 and logs stored in
/var/log/netdata/otel/v1. - Boundary markers: No specific delimiters are defined for processing the content of ingested OTLP signals.
- Capability inventory: System management tools including
systemctl,ss,pgrep, and theotel-pluginbinary. - Sanitization: The skill relies on the
otel-pluginprotocol parser and strict YAML schema validation (deny_unknown_fields) to handle external data safely.
Audit Metadata