netra-setup

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install netra-sdk via standard package managers (pip and npm). These are verifiable dependencies necessary for the skill's primary purpose of SDK integration.
  • [CREDENTIALS_UNSAFE]: The instructions correctly demonstrate using environment variables (os.environ['NETRA_API_KEY'] and process.env.NETRA_API_KEY) to manage authentication secrets rather than hardcoding them, which aligns with security best practices.
  • [DATA_EXFILTRATION]: While the SDK performs network operations to send observability data (traces/metrics), this is the intended functionality of the service. There are no signs of unauthorized data access or exfiltration to third-party domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 05:34 AM