traceloop
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install standard, well-known packages
traceloop-sdk(Python) and@traceloop/node-server-sdk(Node.js) from official registries (PyPI and npm). These are well-established libraries for LLM observability. - [COMMAND_EXECUTION]: Provides standard package management commands for library installation (
pip install,npm install). These are routine development operations. - [DATA_EXFILTRATION]: Mentions exporting trace data to various well-known observability backends such as Datadog, Honeycomb, and Grafana. These are official integrations documented for the purpose of telemetry and do not constitute malicious exfiltration.
- [CREDENTIALS_UNSAFE]: Code examples use clearly marked placeholders like
"your-key"and"your-dd-key", or reference environment variables (process.env.TRACELOOP_API_KEY), following security best practices for credential management.
Audit Metadata