otel-collector
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Verification recipes in several files reference
go runcommands targeting thegithub.com/open-telemetryorganization, which is a well-known entity in the observability space. - [REMOTE_CODE_EXECUTION]: The skill provides instructions to run the
telemetrygenutility viago run github.com/open-telemetry/opentelemetry-collector-contrib/cmd/telemetrygen. This official tool is used for validating telemetry pipeline configurations. - [COMMAND_EXECUTION]: Verification sections provide
docker runandkubectlcommands to test Collector instances locally. These are standard procedures for testing the documented configurations. - [INDIRECT_PROMPT_INJECTION]: The skill documents the configuration of the OpenTelemetry Collector, which ingests telemetry data from various network and file sources (Ingestion points: OTLP receivers, file logs). The documentation does not specify boundary markers for the data itself, which is standard for telemetry. The Collector has capabilities to write to files and communicate over the network (Capability inventory: exporters). Sanitization practices, including the use of the
redactionprocessor to mask sensitive values, are explicitly documented. - [SAFE]: The documentation includes security best practices, such as masking sensitive data with the
redactionprocessor and identifying default port binding restrictions designed to harden the receiver interface.
Audit Metadata