ollygarden-otel-collector-k8s-daemonset
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill appropriately manages sensitive configuration data, such as authentication tokens and backend endpoints, by utilizing environment variables (
${env:OTLP_TOKEN},${env:OTLP_EXPORTER_ENDPOINT}) rather than hardcoding credentials. - [SAFE]: The provided configuration templates include a
memory_limiterprocessor as the primary step in every telemetry pipeline. This is a critical defensive measure that prevents the collector from experiencing Out-Of-Memory (OOM) conditions during traffic spikes. - [SAFE]: The skill implements resource attribute truncation (
truncate_all(attributes, 2048)), which mitigates the risk of data-driven resource exhaustion or log injection attacks involving overly large metadata. - [SAFE]: Kubernetes metadata enrichment via the
k8sattributesprocessor is correctly scoped to the local node using thefilter.node_from_env_var: K8S_NODE_NAMEsetting, adhering to the principle of least privilege and minimizing memory overhead for the DaemonSet. - [SAFE]: The instructions for validating the configuration employ standard, industry-recognized CLI tools (
otelcol-contrib validate) and focus on structural integrity without introducing any remote script execution or unsafe command injection patterns.
Audit Metadata