otel-java
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official OpenTelemetry Javaagent JAR from the project's GitHub releases.
- [COMMAND_EXECUTION]: Uses the GitHub CLI (
gh api) to query the latest release tags for OpenTelemetry Java components. - [INDIRECT_PROMPT_INJECTION]: Accesses external configuration fixtures, CHANGELOGs, and instrumentation metadata from GitHub and the OpenTelemetry Ecosystem Explorer to provide accurate, version-specific guidance.
- Ingestion points: SKILL.md, references/declarative-setup.md, references/sensitive-data-capture.md (via WebFetch and gh api calls).
- Boundary markers: None explicitly defined in the skill instructions for processing external content.
- Capability inventory: Uses
curl,gh api, andWebFetchto interact with remote resources. - Sanitization: Not explicitly mentioned for the fetched data, but the skill itself teaches data sanitization for telemetry output.
Audit Metadata