rust-observability
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical documentation and developer guidelines focused on the correct and secure use of Rust's observability ecosystem (e.g.,
tracing,log,OpenTelemetry). - [DATA_EXPOSURE_EXFILTRATION]: The skill includes a dedicated 'Privacy floor' section that provides automated checks (using
ripgrep) to prevent the leakage of sensitive data like device identifiers (BSSID, IMEI), location data, and secrets. It also details the implementation of a redacting visitor to ensure that only approved fields are emitted to telemetry sinks. - [COMMAND_EXECUTION]: Provides standard local development and CI/CD commands using
cargo(test, clippy, tree) andrgfor security auditing and compliance checks. All commands are intended for local execution by the developer and do not involve remote resource fetching or unauthorized system modifications. - [REMOTE_CODE_EXECUTION]: Does not include any patterns for downloading or executing remote scripts. It references well-known, established Rust crates (e.g.,
tokio,serde,crossbeam-queue) and provides guidance on pinning versions and checking security advisories (e.g., referencing RUSTSEC-2025-0055). - [METADATA_POISONING]: The skill metadata is accurate and consistent with the provided instructions.
Audit Metadata