agent-observability

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Comprehensive analysis of the instructions and scripts reveals no malicious patterns. The skill is intentionally designed to improve security by providing tools for redaction and trace validation.
  • [PROMPT_INJECTION]: The skill manages the risk of indirect prompt injection by processing trace data (which may contain untrusted model outputs) through an audit script that specifically identifies and excludes content-bearing fields and credentials.
  • [COMMAND_EXECUTION]: The skill utilizes a local Python script (scripts/summarize_traces.py) for data validation. A review of the code confirms it uses only standard library components and includes defensive checks, such as path resolution and symlink verification, to prevent unauthorized file access or modification.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 08:37 PM
Security Audit — agent-trust-hub — agent-observability