observability
Audited by Socket on Feb 16, 2026
1 alert found:
Obfuscated FileThe observability skill is functional and aligns with the stated goal of producing transparent, human-readable logs of an AI agent's reasoning. It contains no indicators of deliberate malicious behavior (no network exfiltration, no hardcoded credentials, no obfuscation). However, it poses a moderate security/privacy risk because it instructs agents to log raw inner monologue and contextual artifacts without any sanitization, redaction, storage security, or commit/CI safeguards. In realistic use, this design makes accidental leakage of secrets or PII likely when agents reference environment variables, tokens, or error traces. Mitigations (secret-detection/redaction, gitignore/CI policies, secure storage and access controls) are necessary before adopting this logging approach in production-sensitive environments.