service-mesh-observability
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of standard CLI tools for service mesh management, specifically the Linkerd viz extension for installing monitoring components (
linkerd viz install), accessing dashboards, and performing live traffic inspection (linkerd viz tap). These are standard operations for the referenced well-known service. - [EXTERNAL_DOWNLOADS]: The provided Kubernetes manifests reference official container images from well-known technology providers (e.g.,
jaegertracing/all-in-one:1.50). The documentation also links to official project websites for Istio, Linkerd, and OpenTelemetry for further configuration. - [INDIRECT_PROMPT_INJECTION]: As an observability toolset, the skill describes patterns for ingesting and processing external data (metrics, traces, and logs) which may originate from untrusted sources.
- Ingestion points: Data enters the context via OpenTelemetry receivers (gRPC/HTTP), Zipkin endpoints, and Prometheus scraping targets.
- Boundary markers: The skill provides explicit security warnings to restrict access, redact sensitive attributes, and avoid anonymous authentication (Kiali) or insecure TLS (OTel) in production environments.
- Capability inventory: The skill utilizes standard resource management tools like
kubectland the Linkerd CLI to apply configurations. - Sanitization: Relies on the native sanitization and validation features of the implemented observability frameworks (Istio, Linkerd, OTel).
Audit Metadata