logging-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional guidelines and code snippets intended to teach AI agents how to implement structured logging. It does not ship with executable scripts or binaries.
- [EXTERNAL_DOWNLOADS]: The skill references external educational resources, including technical blogs and the Stripe engineering blog. These are well-known and trusted sources used solely for providing technical context on logging patterns.
- [DATA_EXPOSURE]: The guidelines recommend including high-cardinality fields (IDs) and environment metadata (commit hashes, regions) in logs. This is standard practice in modern observability for correlating logs with deployments and specific user flows. The examples use standard local logging libraries like Pino and do not demonstrate data exfiltration to unauthorized third parties.
- [COMMAND_EXECUTION]: No dangerous command execution patterns were found. Examples provided are standard TypeScript/Node.js application code.
Audit Metadata