phoenix-observability
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill recommends installing legitimate, well-known observability packages like
arize-phoenix,arize-phoenix-otel, andopeninference-instrumentation-openaifrom the official Python Package Index (PyPI).- [COMMAND_EXECUTION] (SAFE): Includes standard shell commands for server management (phoenix serve) and package installation (pip install). These operations are consistent with the primary purpose of setting up a local observability environment.- [CREDENTIALS_UNSAFE] (SAFE): While the skill shows database connection strings, it uses generic placeholders and documented examples (e.g., 'user:pass', 'phoenix:secret') intended for user-provided configuration. No actual hardcoded secrets or sensitive credentials were found.- [DATA_EXFILTRATION] (SAFE): Tracing instrumentation is configured to send data to a user-controlled endpoint (defaulting to localhost:6006). The skill does not contain instructions to send sensitive data to unauthorized external domains.
Audit Metadata