opentelemetry-auto-instrumentation
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches package version metadata and binary artifacts from official and well-known sources, including the npm registry, PyPI, the NuGet registry, RubyGems, and the official OpenTelemetry GitHub repository.
- [COMMAND_EXECUTION]: Executes standard package management commands such as
npm install,pip install,dotnet add package, andgem installto set up instrumentation. It also uses theobserveCLI for validating environment settings and checking for service name collisions. - [DATA_EXFILTRATION]: Performs discovery by reading local configuration files like
package.json,pom.xml, and.envto identify the application runtime, frameworks, and existing OpenTelemetry configurations. This data is used locally to generate the appropriate instrumentation plan.
Audit Metadata