phoenix-observability

Pass

Audited by Gen Agent Trust Hub on Feb 20, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill recommends installing legitimate, well-known observability packages like arize-phoenix, arize-phoenix-otel, and openinference-instrumentation-openai from the official Python Package Index (PyPI).- [COMMAND_EXECUTION] (SAFE): Includes standard shell commands for server management (phoenix serve) and package installation (pip install). These operations are consistent with the primary purpose of setting up a local observability environment.- [CREDENTIALS_UNSAFE] (SAFE): While the skill shows database connection strings, it uses generic placeholders and documented examples (e.g., 'user:pass', 'phoenix:secret') intended for user-provided configuration. No actual hardcoded secrets or sensitive credentials were found.- [DATA_EXFILTRATION] (SAFE): Tracing instrumentation is configured to send data to a user-controlled endpoint (defaulting to localhost:6006). The skill does not contain instructions to send sensitive data to unauthorized external domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 20, 2026, 03:19 AM