azure-monitor-opentelemetry-py
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- Standard Telemetry Ingestion: The skill implements auto-instrumentation for common web frameworks and libraries. While this creates a surface for processing application-generated data, it is the core functionality of the distro and relies on established SDK sanitization.
- Secure Credential Handling: The documentation promotes the use of DefaultAzureCredential and ManagedIdentityCredential, encouraging Entra ID authentication over static keys. Connection strings are handled through environment variables, avoiding hardcoded secrets.
- Trusted Package Sources: The recommended installation command uses the official azure-monitor-opentelemetry package, which is a verified Microsoft resource.
- Azure Infrastructure Integration: Network operations are directed towards official Azure endpoints, ensuring telemetry data is sent to a known, legitimate service.
Audit Metadata