make-app-observability
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Node.js auditing tool (
scripts/audit-trace-contract.mjs) intended to be run locally to inspect project source code for trace header wiring. - [DYNAMIC_EXECUTION]: The utility
scripts/test-audit-trace-contract.mjsusesspawnSyncto execute the local auditing script against generated fixtures during verification, which is a standard developer testing pattern. - [EXTERNAL_DOWNLOADS]: Documentation references the
@qfei-design/make-app-observabilitypackage, which is an expected vendor resource provided by the skill author for managing error notices. - [SAFE]: The skill follows security best practices by explicitly instructing against logging or transmitting sensitive data such as tokens, cookies, or internal error details. Analysis of the scripts confirms they only perform local static analysis using regular expressions and do not exhibit exfiltration or malicious intent.
Audit Metadata