api-observability-setup-axiom-pino-sentry
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard configuration templates for setting up logging and error tracking. It includes a robust 'Red Flags' section and an 'Anti-Patterns' list that specifically warns against committing secrets to version control, hardcoding credentials, and mixing environments.
- [EXTERNAL_DOWNLOADS]: The skill references well-known packages from the official npm registry and established GitHub Actions for deployment workflows. These references are consistent with the skill's primary purpose of infrastructure setup.
- [DATA_EXFILTRATION]: The configuration examples for the Pino logger include a redaction pattern to prevent sensitive information (e.g., authorization headers, cookies, passwords) from being sent to log aggregators. Additionally, the Sentry client configuration utilizes privacy-focused integrations like
maskAllTextandblockAllMediafor session replays. - [DYNAMIC_EXECUTION]: The
instrumentation.tsfile uses conditional dynamic imports based on the runtime environment. This is a standard Next.js pattern for runtime-specific initialization and uses static, local file paths, posing no security risk in this context.
Audit Metadata