oodle-traces
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to install the
oodleCLI via Homebrew from the vendor's official repository (oodle-ai/oodle/oodle). - [COMMAND_EXECUTION]: The skill involves executing several
oodle tracescommands to list service names, filter traces by status or duration, and retrieve detailed span information. These commands are typically used withjqfor JSON output processing. - [CREDENTIALS_UNSAFE]: The skill references standard authentication methods for the Oodle service, including the use of an
OODLE_API_KEYenvironment variable and theoodle configureinitialization command. - [PROMPT_INJECTION]: The skill processes external trace and span data from the Oodle APM service, which presents an indirect prompt injection surface.
- Ingestion points: External trace data enters the context via
oodle traces listandoodle traces getcommand outputs inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are provided when processing trace outputs.
- Capability inventory: The skill utilizes shell command execution and
jqfor data manipulation as described inSKILL.md. - Sanitization: No specific sanitization or filtering is performed on trace content (such as operation names or error messages) before the agent analyzes it.
Audit Metadata