netdata-otel-setup

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of sudo to perform administrative tasks such as restarting services (systemctl restart netdata), setting environment variables, and modifying configuration files using Netdata's edit-config utility. These are standard operations for managing system-level monitoring software.
  • [DATA_EXPOSURE]: Instructions involve managing SSL/TLS certificates and system configuration files in /etc/netdata/. The skill includes diagnostic commands to verify file readability for the service user, which is a common troubleshooting practice for monitoring agents.
  • [PROMPT_INJECTION]: The skill establishes an indirect prompt injection surface by configuring the ingestion of untrusted external data via the OpenTelemetry protocol.
  • Ingestion points: OTLP/gRPC network traffic on port 4317 and logs stored in /var/log/netdata/otel/v1.
  • Boundary markers: No specific delimiters are defined for processing the content of ingested OTLP signals.
  • Capability inventory: System management tools including systemctl, ss, pgrep, and the otel-plugin binary.
  • Sanitization: The skill relies on the otel-plugin protocol parser and strict YAML schema validation (deny_unknown_fields) to handle external data safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 11:23 AM
Security Audit — agent-trust-hub — netdata-otel-setup