signoz
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches deployment configurations and code from the official SigNoz GitHub repository and recommends standard OpenTelemetry packages from the official NPM registry.
- [COMMAND_EXECUTION]: Provides instructions for installing SigNoz using
docker composeandhelm, and suggests usingnpxto manage related agent skills. - [PROMPT_INJECTION]: Documentation describes processing telemetry data (logs, traces, metrics), which presents an attack surface for indirect prompt injection.
- Ingestion points: Telemetry data processing instructions in SKILL.md.
- Boundary markers: No explicit markers or instructions to ignore embedded commands are present in the provided configuration examples.
- Capability inventory: The skill does not define its own scripts or executable tools with high-privilege capabilities.
- Sanitization: No specific data sanitization or filtering steps are detailed for the ingested telemetry content.
Audit Metadata