otel-semantic-conventions
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches semantic convention definitions and release metadata from official OpenTelemetry GitHub repositories.
- [COMMAND_EXECUTION]: A bundled bash script performs data retrieval and parsing using standard utilities including
curl,jq,awk,sed,grep, andgit. - [INDIRECT_PROMPT_INJECTION]: The skill processes external convention data which presents a potential injection surface.
- Ingestion points: Remote YAML files fetched from the OpenTelemetry GitHub repository via
scripts/query-otel-semantic-conventions.sh. - Boundary markers: The script utilizes targeted
awkextraction logic to select specific fields (e.g.,brief,stability,id) rather than importing entire documents into the context. - Capability inventory: The skill supports metadata lookups and command-line parsing; it does not possess file-write capabilities or direct shell-execution for the fetched data.
- Sanitization: Arguments passed to the lookup script are normalized (converted to lowercase and stripped of dots) before processing.
Audit Metadata