sentry-otel-exporter-setup

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the OpenTelemetry Collector binary (otelcol-contrib) directly from the official OpenTelemetry GitHub releases repository, which is a well-known industry standard source.
  • [EXTERNAL_DOWNLOADS]: Fetches configuration templates and documentation from the official open-telemetry/opentelemetry-collector-contrib GitHub repository to assist in setup.
  • [COMMAND_EXECUTION]: Executes system commands to detect the environment (e.g., uname -s, uname -m, which otelcol-contrib) and runs the collector's validate command to verify the configuration file.
  • [PRIVILEGE_ESCALATION]: Applies chmod +x to the downloaded OpenTelemetry Collector binary to enable execution for validation and operation, which is standard procedure for installing CLI tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data by reading existing OpenTelemetry configuration files and user-defined .env files.
  • Ingestion points: Reads files matching patterns like otel-collector-config.*, collector-config.*, and .env as specified in SKILL.md steps 1 and 5.
  • Boundary markers: Explicitly requests user confirmation before selecting files, modifying existing configurations, or proceeding after credential setup.
  • Capability inventory: Spawns subprocesses to run curl, tar, chmod, and executes the otelcol-contrib binary; also suggests installing Sentry and OpenTelemetry packages via standard managers (pip, npm, bundle).
  • Sanitization: Strictly enforces the use of placeholder values (e.g., your-org-slug, your-token-here) when setting up environment variables to prevent the accidental inclusion of real secrets in the configuration process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:10 AM
Security Audit — agent-trust-hub — sentry-otel-exporter-setup