tracekit-dotnet-sdk
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill follows standard .NET development practices for project configuration and dependency management.\n- [EXTERNAL_DOWNLOADS]: The skill installs the
TraceKit.AspNetCoreandTraceKit.CoreNuGet packages, which are legitimate dependencies provided by the SDK vendor.\n- [COMMAND_EXECUTION]: Uses standard .NET CLI commands such asdotnet add packageanddotnet user-secretsto configure the application environment and dependencies.\n- [DATA_EXFILTRATION]: Configures the application to transmit telemetry and tracing data to the official vendor endpoint athttps://app.tracekit.dev/v1/traces. This is the intended primary purpose of the observability skill.\n- [CREDENTIALS_UNSAFE]: The skill proactively mitigates credential exposure by instructing the user to use environment variables and .NET User Secrets rather than hardcoding API keys in source code or configuration files.
Audit Metadata