logging-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or secrets were found. The skill explicitly provides best practices and code for redacting and masking sensitive information like passwords and PII.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unsafe pipe-to-shell commands were identified. All dependencies are well-known logging libraries.
- [DATA_EXFILTRATION]: No evidence of unauthorized data transmission. The skill focuses on legitimate logging and observability infrastructure (ELK, CloudWatch).
- [COMMAND_EXECUTION]: The script
scripts/health-check.shis a benign utility for checking service availability and does not contain malicious commands. - [OBFUSCATION]: No obfuscated code, base64-encoded payloads, or hidden characters were detected in the instructions or provided scripts.
- [PROMPT_INJECTION]: The skill does not contain instructions designed to bypass AI safety guardrails or manipulate agent behavior.
Audit Metadata