distributed-tracing-rails
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides implementation details for the OpenTelemetry Ruby SDK, which is a widely adopted CNCF (Cloud Native Computing Foundation) standard for observability.
- [SAFE]: Data exfiltration analysis shows that network operations are restricted to sending trace data via the OTLP (OpenTelemetry Line Protocol) to a user-configured collector (e.g.,
OTEL_EXPORTER_OTLP_ENDPOINT). This is the intended and documented primary function of the skill. - [SAFE]: The skill includes specific security best practices, explicitly advising against storing PII in span attributes or baggage to prevent accidental data exposure in logs or downstream services.
- [SAFE]: Dependencies listed (opentelemetry-sdk, opentelemetry-exporter-otlp, opentelemetry-instrumentation-all) are official, well-maintained libraries from the OpenTelemetry project.
- [SAFE]: External resources and documentation links point to official repositories (GitHub/open-telemetry) and established industry standards (W3C Trace Context, opentelemetry.io), which are trusted sources in the observability domain.
Audit Metadata