signoz-reducing-telemetry-cost
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data retrieved from the SigNoz instance, which could contain adversarial content designed to influence the agent's logic.
- Ingestion points: Data is ingested via
signoz_search_logs(log bodies),signoz_get_alert(alert expressions), andsignoz_get_service_top_operations(span names). - Boundary markers: The skill does not explicitly define delimiters for tool outputs in its instructions.
- Capability inventory: The skill is restricted to diagnostic and advisory roles; it recommends configuration changes (such as environment variables like
LOG_LEVEL=WARNor OpenTelemetry Collector filters) but does not perform automated writes, network exfiltration, or shell execution. - Sanitization: No explicit sanitization or filtering of log/alert content is performed before analysis.
- [EXTERNAL_DOWNLOADS]: The skill directs users to vendor-controlled resources and official documentation.
- The instructions reference
signoz-mcp-setup, which is the vendor's official setup utility for the SigNoz MCP server. - Documentation links target the
signoz.iodomain for ingestion and management guides.
Audit Metadata