production-monitoring
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides implementation patterns for production observability using industry-standard libraries and frameworks. It includes templates for structured logging, distributed tracing with OpenTelemetry, and metrics collection with Prometheus.
- [INDIRECT_PROMPT_INJECTION]: The skill defines middleware that ingests external data from HTTP headers for request correlation purposes.
- Ingestion points:
CorrelationIDMiddlewareinSKILL.mdreadsx-request-idandx-correlation-idfrom request headers. - Boundary markers: None explicitly defined for these IDs, as they are treated as opaque strings for logging and tracing context within the application flow.
- Capability inventory: The skill provides instructions for logging (
structlog,pino), tracing (opentelemetry), and metrics (prometheus_client). It does not include subprocess execution, dynamic code execution, or file writes based on this external data. - Sanitization: The
pinosetup inSKILL.mdincludes aredactconfiguration to prevent logging of sensitive fields such as authorization headers, cookies, and passwords. The middleware decodes the header but does not perform complex parsing that would be vulnerable to injection.
Audit Metadata