logs-python
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional documentation and reference files for setting up PostHog logging using the OpenTelemetry protocol.- [SAFE]: All identified dependencies, such as the "posthog" SDK and "opentelemetry" packages, are standard industry libraries or official vendor resources.- [SAFE]: The skill promotes secure development practices by advising against hardcoding credentials and recommending the use of environment variables.- [SAFE]: Guidelines explicitly warn against the collection of PII (Personally Identifiable Information) and secrets within log events, reducing the risk of accidental data exposure.- [SAFE]: Indirect Prompt Injection Surface: The skill references an MCP server that allows querying log data, which constitutes an ingestion point for untrusted data.
- Ingestion points: "logs-query" tool (references/debug-logs-mcp.md)
- Boundary markers: None specified in the documentation.
- Capability inventory: The skill does not define any execution capabilities (such as shell commands or code evaluation) based on log content.
- Sanitization: None specified in the documentation.
Audit Metadata