Skip to main content

otel-observability

Facilitates OpenTelemetry observability with tracing, metrics, and logs for enhanced monitoring and debugging of applications.

Install this skill

or
80/100

Security score

The otel-observability skill was audited on Mar 1, 2026 and we found 12 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 549

Template literal with variable interpolation in command context

SourceSKILL.md
549`${req.method} ${req.path}`,
medium line 612

Template literal with variable interpolation in command context

SourceSKILL.md
612`job:${job.type}`,
low line 176

Fetch to external URL

SourceSKILL.md
176const user = await fetch("/api/users/1");
low line 497

Access to .env file

SourceSKILL.md
497headers: { "x-api-key": process.env.API_KEY },
low line 58

External URL reference

SourceSKILL.md
58OTEL_EXPORTER_OTLP_ENDPOINT="http://localhost:4318" \
low line 70

External URL reference

SourceSKILL.md
70| `OTEL_EXPORTER_OTLP_ENDPOINT` | Collector endpoint | `"http://localhost:4318"` |
low line 93

External URL reference

SourceSKILL.md
93url: "http://localhost:4318/v1/traces",
low line 98

External URL reference

SourceSKILL.md
98url: "http://localhost:4318/v1/metrics",
low line 218

External URL reference

SourceSKILL.md
218span.setAttribute("http.url", "https://api.example.com/users");
low line 496

External URL reference

SourceSKILL.md
496url: "http://collector:4318/v1/traces",
low line 514

External URL reference

SourceSKILL.md
514endpoint: "http://jaeger:14268/api/traces",
low line 646

External URL reference

SourceSKILL.md
646"http.url": "https://api.example.com/users",
Scanned on Mar 1, 2026
View Security Dashboard