arize-trace — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  warn

  The skill facilitates management of Arize traces using the ax CLI. It provides robust security guidance for API key handling and mitigates indirect prompt injection risks by advising that exported data be treated as raw text. However, it includes instructions for modifying shell configuration files (~/.zshrc, ~/.bashrc) to persist environment variables, which is a sensitive system modification.

  Risk: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONMay 26, 2026Full report

• Socket

  pass

  No alerts

  May 26, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · 1 issue

  Risk: MEDIUMMay 26, 2026Full report

• Runlayer

  fail

  1/1 file flagged

  Risk: HIGHMar 12, 2026Full report

• ZeroLeaks

  pass

  1 finding · Score: 86/100

  Risk: LOWApr 16, 2026Full report