rust-observability

Pass

Audited by Gen Agent Trust Hub on Nov 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of technical documentation and developer guidelines focused on the correct and secure use of Rust's observability ecosystem (e.g., tracing, log, OpenTelemetry).
  • [DATA_EXPOSURE_EXFILTRATION]: The skill includes a dedicated 'Privacy floor' section that provides automated checks (using ripgrep) to prevent the leakage of sensitive data like device identifiers (BSSID, IMEI), location data, and secrets. It also details the implementation of a redacting visitor to ensure that only approved fields are emitted to telemetry sinks.
  • [COMMAND_EXECUTION]: Provides standard local development and CI/CD commands using cargo (test, clippy, tree) and rg for security auditing and compliance checks. All commands are intended for local execution by the developer and do not involve remote resource fetching or unauthorized system modifications.
  • [REMOTE_CODE_EXECUTION]: Does not include any patterns for downloading or executing remote scripts. It references well-known, established Rust crates (e.g., tokio, serde, crossbeam-queue) and provides guidance on pinning versions and checking security advisories (e.g., referencing RUSTSEC-2025-0055).
  • [METADATA_POISONING]: The skill metadata is accurate and consistent with the provided instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 7, 2026, 06:29 AM