tracekit-dotnet-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill guides the agent through the process of instrumenting a .NET application with TraceKit APM, using standard .NET patterns and the vendor's official services.
- [COMMAND_EXECUTION]: The instructions reference a script
./scripts/run-tracekit-auth.shto check authentication status. This is a routine operation for managing vendor-specific credentials during setup. - [EXTERNAL_DOWNLOADS]: Directs the agent to install vendor-owned packages (
TraceKit.AspNetCore,TraceKit.Core) using the standarddotnet add packagecommand. This aligns with the developer's provided context and official package naming conventions. - [DATA_EXFILTRATION]: Configures the application to transmit tracing, error, and optional LLM telemetry to the vendor's official collection endpoint (
app.tracekit.dev). This behavior is the intended primary function of the observability tool. - [PROMPT_INJECTION]: Contains instructions that modify the agent's interaction flow by prioritizing an automated authentication process over manual user steps (e.g., "Do not tell the user to go sign up..."). This is evaluated as a UX-focused workflow instruction rather than a malicious safety bypass or concealment.
Audit Metadata