otel-collector

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Verification recipes in several files reference go run commands targeting the github.com/open-telemetry organization, which is a well-known entity in the observability space.
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to run the telemetrygen utility via go run github.com/open-telemetry/opentelemetry-collector-contrib/cmd/telemetrygen. This official tool is used for validating telemetry pipeline configurations.
  • [COMMAND_EXECUTION]: Verification sections provide docker run and kubectl commands to test Collector instances locally. These are standard procedures for testing the documented configurations.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents the configuration of the OpenTelemetry Collector, which ingests telemetry data from various network and file sources (Ingestion points: OTLP receivers, file logs). The documentation does not specify boundary markers for the data itself, which is standard for telemetry. The Collector has capabilities to write to files and communicate over the network (Capability inventory: exporters). Sanitization practices, including the use of the redaction processor to mask sensitive values, are explicitly documented.
  • [SAFE]: The documentation includes security best practices, such as masking sensitive data with the redaction processor and identifying default port binding restrictions designed to harden the receiver interface.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 08:22 AM