dotnet-observability
Fail
Audited by Socket on Mar 5, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
This module is a benign documentation/skill package describing how to configure OpenTelemetry and health checks for .NET apps. I found no indications of obfuscated or malicious code, no hard-coded credentials, and no remote-execution instructions. The relevant security concerns are operational: telemetry export can leak sensitive application data if endpoints are misconfigured or collectors are untrusted, and permissive dependency version ranges increase supply-chain risk. Recommend: pin dependency versions, enforce authenticated/approved collector endpoints, apply network egress controls, redact sensitive fields from telemetry/logs, and document sampling and retention controls.
Confidence: 98%
Audit Metadata