otel-weaver
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to install OpenTelemetry Weaver via official channels, including GitHub releases, the 'otel/weaver' Docker image, and the 'setup-weaver' GitHub Action. These are well-known and reputable sources within the observability ecosystem.
- [COMMAND_EXECUTION]: The workflow and the 'inspect-resolved.sh' script utilize standard CLI utilities like 'weaver', 'docker', 'jq', and 'git'. These tools are invoked to perform registry validation, code generation, and CI/CD operations as part of the tool's core functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes telemetry registries (YAML) and templates (Jinja2), which constitutes a data ingestion surface. The instructions mitigate potential risks by recommending explicit validation steps ('weaver registry check') and schema inspections before generation.
- [DYNAMIC_EXECUTION]: The skill uses MiniJinja and Jq to transform registry data into source code. This dynamic transformation is the primary purpose of the skill and is implemented using standard templating practices.
Audit Metadata