workleap-telemetry
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for using @workleap/telemetry, a legitimate telemetry integration library. The content is consistent with its stated purpose of assisting developers with observability and session replay setup.\n- [EXTERNAL_DOWNLOADS]: The skill references standard Node.js packages (@workleap/telemetry, @opentelemetry/api, logrocket, @workleap/logging) which are appropriate for its stated purpose. These are well-known libraries in the frontend observability ecosystem.\n- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. API key and proxy URL configuration options use standard placeholders (e.g., 'hcaik_...', 'your-app-id', 'your-namespace') to guide user configuration without exposing real secrets.\n- [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. The skill explicitly includes privacy guidelines, such as using data-public/data-private attributes to protect Personally Identifiable Information (PII) in session replays and avoiding logging PII to LogRocket.
Audit Metadata