monitoring-setup
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill instructions and provided examples follow best practices for service monitoring and operational readiness.\n- [EXTERNAL_DOWNLOADS]: The skill references the use of official OpenTelemetry and Prometheus libraries, such as @opentelemetry/sdk-node and @opentelemetry/auto-instrumentations-node. These are well-known, trusted industry-standard packages from reputable open-source organizations.\n- [DATA_EXFILTRATION]: The code templates correctly use environment variables (e.g., process.env.OTEL_EXPORTER_OTLP_ENDPOINT) for configuring service endpoints and metadata. No patterns of hardcoded credentials, sensitive file access, or unauthorized network exfiltration were found.\n- [COMMAND_EXECUTION]: The logic provided in the examples (e.g., health check route handlers and metrics middleware) is restricted to standard service interactions, such as database connectivity checks and request duration measurement, with no arbitrary shell command execution capabilities identified.
Audit Metadata