using-logging
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: CRITICAL
Full Analysis
- [SAFE] (SAFE): The skill is primarily instructional documentation for implementing logging. The code snippets provided use standard TypeScript/Node.js patterns and do not perform any dangerous operations.
- [EXTERNAL_DOWNLOADS] (SAFE): References to external documentation (getpino.io and fullstackrecipes.com) are informational and point to reputable resources for the mentioned library.
- [FALSE POSITIVE ALERT] (SAFE): The automated security alert regarding 'logger.info' is a false positive. 'logger.info' is a standard method call in JavaScript logging libraries and is not a malicious URL.
- [DATA_EXFILTRATION] (SAFE): While the skill describes logging patterns, it uses a local logger module ('@/lib/logging/logger') rather than sending data to an external or untrusted endpoint.
- [COMMAND_EXECUTION] (SAFE): No command execution or subprocess spawning is present in the provided snippets.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata