traceway-setup
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches an agent installation script from the vendor's official domain (
install.tracewayapp.com). - [REMOTE_CODE_EXECUTION]: Executes the Traceway OTel Agent installer by piping a remote script from
install.tracewayapp.comdirectly into the shell. - [COMMAND_EXECUTION]: Generates and runs a local shell script (
traceway-setup-wait.sh) to synchronize project setup and write configuration tokens to local environment files. - [DATA_EXFILTRATION]: Transmits a temporary setup token to the Traceway platform to coordinate project creation. The skill includes specific safeguards and instructions to prevent long-lived credentials from being exposed in chat logs or committed to version control.
- [PROMPT_INJECTION]: Analyzes the repository's configuration files (e.g.,
package.json,go.mod,requirements.txt) to determine project architecture, which involves processing untrusted external data. - Ingestion points: Reads project manifest and configuration files from the local filesystem.
- Boundary markers: The agent is explicitly instructed to present a proposed configuration map and obtain human confirmation before performing any modifications or submitting plans.
- Capability inventory: File system access (read/write), shell command execution, and network communication via
curl. - Sanitization: Relies on user review of the generated setup plan before execution or submission to the platform.
Audit Metadata