salvo-logging
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation for the Salvo web framework. All code snippets demonstrate standard logging patterns using the 'tracing' ecosystem.
- [DATA_EXPOSURE]: The skill includes a 'Gotchas' section that explicitly warns developers to 'Never log request bodies or headers like Authorization / Cookie unredacted,' which aligns with security best practices for avoiding accidental credential exposure.
- [EXTERNAL_DOWNLOADS]: Dependencies listed in the TOML blocks (salvo, tracing, uuid, opentelemetry) are well-known, standard libraries from the official Rust package registry (crates.io).
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest external data such as the 'x-request-id' header or URL parameters for logging purposes. While this creates a surface for untrusted data ingestion, the risk is minimal as the data is used for structured logging and tracing within a controlled environment.
Audit Metadata