observability-and-instrumentation
Instrument Production Systems with Clear Telemetry
Production teams need reliable evidence when services fail, slow down, or behave unexpectedly. This skill helps design useful logs, metrics, traces, alerts, and verification steps.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "observability-and-instrumentation" from https://skillstore.io/skills/addyosmani-observability-and-instrumentation.md and its manifest at https://skillstore.io/api/skills/addyosmani-observability-and-instrumentation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„observability-and-instrumentation“ wird verwendet. A payment retry feature needs telemetry for success rate, permanent failures, and provider latency.
Erwartetes Ergebnis:
- Use structured events for payment outcomes and provider error codes.
- Add a latency histogram with percentiles for provider calls.
- Trace a sampled checkout request and retain error traces.
„observability-and-instrumentation“ wird verwendet. A team wants to page on CPU usage and label metrics with customer IDs.
Erwartetes Ergebnis:
Use user-facing error rate or latency for paging, and move customer identifiers to logs or traces. Keep metric labels bounded.
„observability-and-instrumentation“ wird verwendet. A service has alerts but no runbooks or staging verification.
Erwartetes Ergebnis:
- Link every alert to a short runbook with meaning, first check, and escalation path.
- Test induced failures and confirm telemetry reaches the correct channel.
Sicherheitsaudit
SicherAll 41 static findings are false positives caused by Markdown backticks, documentation syntax, benign example code, or a relative reference. The reviewed skill contains no executable commands, credential exfiltration, unsafe file access, or prompt injection.
Risikofaktoren
⚙️ Externe Befehle (34)
📁 Dateisystemzugriff (1)
🔑 Umgebungsvariablen (2)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/addyosmani-observability-and-instrumentation/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/addyosmani-observability-and-instrumentation?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/addyosmani-observability-and-instrumentation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-observability-and-instrumentation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/addyosmani-observability-and-instrumentation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
addyosmani. (2026). observability-and-instrumentation security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-observability-and-instrumentation/audits/2BibTeX-Zitat
@techreport{addyosmani-addyosmani-observability-and-instrumentation-2026,
author = {addyosmani},
title = {observability-and-instrumentation security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/addyosmani-observability-and-instrumentation/audits/2},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "observability-and-instrumentation security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-observability-and-instrumentation/audits/2"
identifiers:
- type: other
value: "skillstore:addyosmani-observability-and-instrumentation:audit:2"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Instrument a New Endpoint
Define the endpoint questions, add structured logs, and select RED metrics with bounded labels.
Improve Incident Diagnosis
Add correlation IDs, distributed tracing, and actionable alerts so on-call engineers can follow a failing request.
Review Production Readiness
Use the verification checklist to assess telemetry coverage, secret handling, alert quality, and staging validation.
Diese Prompts ausprobieren
Review this feature description and list two to four questions an on-call engineer must answer. Map each question to a log, metric, or trace.
Design structured log events for this endpoint. Include stable event names, safe fields, log levels, correlation IDs, and entry-point attribution.
Create an observability plan for this service and its dependencies. Cover RED metrics, bounded labels, OpenTelemetry traces, sampling, and symptom-based alerts.
Review this instrumentation diff against the observability checklist. Identify missing signals, cardinality risks, sensitive data exposure, alert weaknesses, and staging tests.
Bewährte Praktiken
- Start from concrete on-call questions and map every signal to one question.
- Allowlist telemetry fields and exclude secrets, tokens, passwords, and full PII.
- Verify telemetry and alert delivery in staging before calling the work complete.
Vermeiden
- Adding unstructured logs without a stable event name or correlation ID.
- Using user IDs, raw URLs, or error text as metric labels.
- Paging on infrastructure causes without a user-facing symptom or runbook.
Häufig gestellte Fragen
What does this skill help me instrument?
Does it recommend a specific monitoring vendor?
Why are structured logs important?
How should I choose metric labels?
Should every alert page an engineer?
How do I validate new telemetry?
Entwicklerdetails
Autor
addyosmaniLizenz
MIT
Skillstore-Revision
r2
Versionshinweis
Der Autor hat keine Version angegeben.
Ref.
5d5054f8a23586f9b500fece1cb613a9dffc787b
Aktualität der Wartung
19.9.2026
Nutzung
1 Downloads · 0 Aufrufe
Dateistruktur
📄 SKILL.md