salvo-logging

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate documentation for the Salvo web framework. All code snippets demonstrate standard logging patterns using the 'tracing' ecosystem.
  • [DATA_EXPOSURE]: The skill includes a 'Gotchas' section that explicitly warns developers to 'Never log request bodies or headers like Authorization / Cookie unredacted,' which aligns with security best practices for avoiding accidental credential exposure.
  • [EXTERNAL_DOWNLOADS]: Dependencies listed in the TOML blocks (salvo, tracing, uuid, opentelemetry) are well-known, standard libraries from the official Rust package registry (crates.io).
  • [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest external data such as the 'x-request-id' header or URL parameters for logging purposes. While this creates a surface for untrusted data ingestion, the risk is minimal as the data is used for structured logging and tracing within a controlled environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 04:30 PM