otel-dotnet

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute an installation script (otel-dotnet-auto-install.sh) from the official OpenTelemetry GitHub repository using curl | bash in references/instrumentation-libraries.md. The source is a highly reputable official project repository.
  • [EXTERNAL_DOWNLOADS]: Fetches latest release metadata, NuGet package versions, and documentation from official sources including GitHub, NuGet, and opentelemetry.io across SKILL.md, references/setup.md, and references/breaking-changes.md.
  • [COMMAND_EXECUTION]: Instructs the agent to use gh api for version discovery and grep for local environment and project inspection in SKILL.md and references/instrumentation-libraries.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content from external web sources, which presents a potential vulnerability surface to adversarial instructions.
  • Ingestion points: External data is fetched via WebFetch and gh api in SKILL.md, references/setup.md, and references/breaking-changes.md.
  • Boundary markers: Absent; the instructions do not specify delimiters or safety warnings for the fetched content.
  • Capability inventory: Limited to read-only version discovery via gh api (SKILL.md, references/breaking-changes.md) and local environment inspection via grep and env (references/instrumentation-libraries.md).
  • Sanitization: Absent; the fetched content is intended for display or extraction of version strings without specific filtering mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:37 AM
Security Audit — agent-trust-hub — otel-dotnet