spring-boot-observability
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard Java and YAML configuration templates for implementing Spring Boot Actuator health checks and Micrometer metrics.
- [SAFE]: It includes explicit security best practices for production environments, such as restricting access to sensitive Actuator endpoints (
/env,/heapdump,/beans) and implementing role-based access control (RBAC) using Spring Security. - [SAFE]: It correctly identifies data exposure risks related to metrics tagging, advising developers to avoid using high-cardinality data like User IDs or UUIDs as tags, which prevents both performance degradation and accidental PII leakage to monitoring backends.
- [SAFE]: The instructions promote the use of correlation IDs for distributed tracing, which is a standard security and debugging practice for microservices architecture.
Audit Metadata