sensitive-logging-audit
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- Static Analysis for Security Auditing: The skill includes a specialized script that utilizes the TypeScript Compiler API to perform deep static analysis of source code. This allows the agent to identify logging calls even when objects are aliased, destructured, or inherited, providing a robust mechanism for finding potential data exposures.
- Policy-Aware Classification: The auditing logic identifies security guards, such as checks against
dontLogModelData, to distinguish between policy-compliant and non-compliant log statements. This automated classification helps in prioritizing sensitive areas for human review. - Local Operation Scoping: All analysis and report generation activities occur within the user's local environment. The script reads files from defined source directories and writes diagnostic reports to local temporary storage, without initiating external network communication.
- Secure Identification Tracking: The skill uses cryptographic hashing to generate stable fingerprints for detected log sinks. This allows for persistent tracking of findings across code changes without relying on volatile line numbers, which supports consistent long-term security monitoring.
Audit Metadata