tracekit-custom-metrics
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill references a local script
./scripts/run-tracekit-auth.shused to verify the authentication status of the TraceKit environment. - [CREDENTIALS_UNSAFE]: The instructions direct the agent to check for existing credentials in
~/.tracekitconfigor theTRACEKIT_API_KEYenvironment variable. It explicitly forbids the hardcoding of API keys in code snippets, recommending environment variables as a safe alternative. - [EXTERNAL_DOWNLOADS]: The skill includes links to the vendor's official dashboard and documentation at
app.tracekit.devfor the purpose of manual metric verification and troubleshooting. - [PROMPT_INJECTION]: The provided instructions guide the agent to prioritize checking for existing authentication configurations before prompting the user for sign-up steps. This is a workflow optimization for user experience and does not represent an attempt to override safety constraints or conceal malicious activities.
Audit Metadata