otel-dotnet
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute an installation script (
otel-dotnet-auto-install.sh) from the official OpenTelemetry GitHub repository usingcurl | bashinreferences/instrumentation-libraries.md. The source is a highly reputable official project repository. - [EXTERNAL_DOWNLOADS]: Fetches latest release metadata, NuGet package versions, and documentation from official sources including GitHub, NuGet, and opentelemetry.io across
SKILL.md,references/setup.md, andreferences/breaking-changes.md. - [COMMAND_EXECUTION]: Instructs the agent to use
gh apifor version discovery andgrepfor local environment and project inspection inSKILL.mdandreferences/instrumentation-libraries.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from external web sources, which presents a potential vulnerability surface to adversarial instructions.
- Ingestion points: External data is fetched via
WebFetchandgh apiinSKILL.md,references/setup.md, andreferences/breaking-changes.md. - Boundary markers: Absent; the instructions do not specify delimiters or safety warnings for the fetched content.
- Capability inventory: Limited to read-only version discovery via
gh api(SKILL.md,references/breaking-changes.md) and local environment inspection viagrepandenv(references/instrumentation-libraries.md). - Sanitization: Absent; the fetched content is intended for display or extraction of version strings without specific filtering mechanisms.
Audit Metadata