Skip to main content

evernote-observability

Sets up observability for Evernote integrations, enabling monitoring, logging, and alerting for enhanced application performance.

Install this skill

or
76/100

Security score

The evernote-observability skill was audited on Feb 21, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 151

Template literal with variable interpolation in command context

SourceSKILL.md
151const operation = `${storeName}.${prop}`;
medium line 179

Template literal with variable interpolation in command context

SourceSKILL.md
179status: error.errorCode ? `error_${error.errorCode}` : 'error',
medium line 325

Template literal with variable interpolation in command context

SourceSKILL.md
325const span = tracer.startSpan(`evernote.${operation}`, {
low line 222

Access to .env file

SourceSKILL.md
222level: process.env.LOG_LEVEL || 'info',
low line 230

Access to .env file

SourceSKILL.md
230environment: process.env.NODE_ENV
low line 234

Access to .env file

SourceSKILL.md
234format: process.env.NODE_ENV === 'development'
low line 245

Access to .env file

SourceSKILL.md
245if (process.env.NODE_ENV === 'production') {
low line 311

Access to .env file

SourceSKILL.md
311if (process.env.JAEGER_ENDPOINT) {
low line 313

Access to .env file

SourceSKILL.md
313endpoint: process.env.JAEGER_ENDPOINT
low line 590

External URL reference

SourceSKILL.md
590- [Prometheus](https://prometheus.io/docs/)
low line 591

External URL reference

SourceSKILL.md
591- [OpenTelemetry](https://opentelemetry.io/docs/)
low line 592

External URL reference

SourceSKILL.md
592- [Grafana](https://grafana.com/docs/)
Scanned on Feb 21, 2026
View Security Dashboard
Installation guide →