sentry-otel-exporter-setup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the OpenTelemetry Collector binary (
otelcol-contrib) directly from the official OpenTelemetry GitHub releases repository, which is a well-known industry standard source. - [EXTERNAL_DOWNLOADS]: Fetches configuration templates and documentation from the official
open-telemetry/opentelemetry-collector-contribGitHub repository to assist in setup. - [COMMAND_EXECUTION]: Executes system commands to detect the environment (e.g.,
uname -s,uname -m,which otelcol-contrib) and runs the collector'svalidatecommand to verify the configuration file. - [PRIVILEGE_ESCALATION]: Applies
chmod +xto the downloaded OpenTelemetry Collector binary to enable execution for validation and operation, which is standard procedure for installing CLI tools. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data by reading existing OpenTelemetry configuration files and user-defined
.envfiles. - Ingestion points: Reads files matching patterns like
otel-collector-config.*,collector-config.*, and.envas specified inSKILL.mdsteps 1 and 5. - Boundary markers: Explicitly requests user confirmation before selecting files, modifying existing configurations, or proceeding after credential setup.
- Capability inventory: Spawns subprocesses to run
curl,tar,chmod, and executes theotelcol-contribbinary; also suggests installing Sentry and OpenTelemetry packages via standard managers (pip,npm,bundle). - Sanitization: Strictly enforces the use of placeholder values (e.g.,
your-org-slug,your-token-here) when setting up environment variables to prevent the accidental inclusion of real secrets in the configuration process.
Audit Metadata