The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides standard Docker commands for deploying Jaeger. While these involve container execution, they use official images (cr.jaegertracing.io/jaegertracing/jaeger) and follow best practices like pinning versions and binding to appropriate ports. Evidence: docker run --rm --name jaeger ... in SKILL.md.
[EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard OpenTelemetry instrumentation packages via pip and npm. These are well-known, official libraries from the OpenTelemetry project (e.g., opentelemetry-sdk, @opentelemetry/sdk-node). No untrusted third-party packages are used.
[PRIVILEGE_ESCALATION]: The skill provides a command to fix permission issues on Docker volumes by changing ownership to UID 10001 (the Jaeger user). This is a standard administrative task for container persistence and does not constitute malicious escalation. Evidence: docker run --rm -v <project>_jaeger-data:/badger alpine:3 chown -R 10001 /badger in SKILL.md.
[INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface where it processes trace data from microservices. However, it focuses on observability and does not involve instructions that would execute logic based on the trace content. It identifies that OTLP ports have no authentication and recommends private networking.

jaeger