opentelemetry-validation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches OpenTelemetry semantic convention schemas from the official OpenTelemetry GitHub repositories (api.github.com and raw.githubusercontent.com). These downloads are used to perform schema drift analysis and validate that the service telemetry conforms to industry standards.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various
observeCLI subcommands (e.g.,observe query,observe dataset,observe auth) to interact with the Observe platform. It also utilizes standard shell utilities such ascurl,jq,sort, andtailto retrieve and parse schema information from remote sources. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes telemetry data and external schema files.
- Ingestion points: The skill reads telemetry data output from
observe queryand YAML-formatted schema files fetched viacurlinreferences/instrumentation-audit.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are used when processing telemetry fields or schema content.
- Capability inventory: The skill utilizes shell command execution (the
observeCLI,curl, andjq) to perform its primary functions. - Sanitization: The skill relies on
jqfor parsing JSON output and standard shell processing for derived data points, though no specific sanitization for natural language instructions within the data is implemented.
Audit Metadata