Observability & Reliability Engineering
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is an instruction-only observability guide with no code, credentials, or install-time authority, though users should apply its log-scrubbing guidance carefully.
This appears safe to install as an instruction-only observability skill. Before applying its logging templates in a real system, confirm that sensitive fields are redacted or hashed, retention is limited, and access to logs and dashboards is restricted.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If implemented carelessly, logs and dashboards could retain sensitive user or business data longer than intended.
The skill recommends structured observability logs that may contain persistent user and business identifiers, while also explicitly advising anonymization and secret/PII scrubbing.
client_ip: 203.0.113.42 # Anonymize in logs if needed ... business: user_id: "usr_456" ... amount_cents: 4999 ... Never log secrets ... PII & Secret Scrubbing
Use the provided scrubbing patterns, minimize logged fields, avoid secrets and direct PII, and enforce log retention and access-control policies.
