logfire-setup
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches specialized sub-skills from the official vendor domain at
pydantic.devto handle specific observability tasks like querying and UI access. - [COMMAND_EXECUTION]: The skill uses
uvxornpxto execute thelogfire whoamicommand, which is necessary to verify the current authentication state and project context. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project documentation to determine the appropriate monitoring strategy.
- Ingestion points: Reads project files including
README.md,AGENTS.md, andCLAUDE.mdin Step 2. - Boundary markers: None explicitly defined in this entry-point skill.
- Capability inventory: The skill can execute CLI commands (
uvx logfire) and fetch additional remote instructions. - Sanitization: No specific sanitization or filtering is mentioned for the documentation content being read.
- [CREDENTIALS_UNSAFE]: The skill references the use of
.logfire/logfire_credentials.jsonfor managing authentication tokens. It includes explicit security warnings against displaying, logging, or committing these tokens, following standard secret management practices.
Audit Metadata