agent-observability

No evidence of malware or intentional malicious behavior. The primary security issue is that span redaction is ineffective: sanitized attributes are computed but the original span is exported, potentially leaking PII. The insecure OTLP configuration and advice to retain full prompts/responses warrant privacy and transport-security safeguards.