api-observability-axiom-pino-sentry

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate observability patterns for logging and error tracking, following industry standards.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements logging mechanisms that ingest application data. While this creates a potential surface for indirect injection if log viewers are vulnerable, the instructions promote best practices to mitigate risks.
  • Ingestion points: Application data passed to logger methods in examples/core.md and examples/performance.md.
  • Boundary markers: Not applicable for this code-centric documentation skill.
  • Capability inventory: Network communication to Axiom and Sentry via standard SDKs and transports.
  • Sanitization: Explicit instructions for configuring Pino's redact option in reference.md to prevent sensitive data exposure.
  • [DATA_EXFILTRATION]: While the skill involves sending data to external monitoring services (Axiom, Sentry), it uses standard protocols and officially recognized libraries. It includes specific warnings against logging sensitive information like passwords and tokens, providing redaction patterns as a primary defense.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 03:56 PM
Security Audit — agent-trust-hub — api-observability-axiom-pino-sentry