Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →openai/sensitive-logging-audit
Audit and fix sensitive-data exposure through Python runtime logging in openai-agents-python.
Passed 7 of 15 test cases with the skill, and 8 of 15 without it.
3 fixed8 passed either way7 still failing5 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
When establishing the initial review surface for a sensitive logging audit in `src/agents`, which configuration file must be reviewed alongside `src/agents/logger.py` and affected caller sites?
| Checked | Without skill | With skill |
|---|---|---|
| The review surface includes src/agents/_debug.py. | Missed | Passed |
The instructions your model reads when the skill loads.
Find candidate output sinks, trace their values manually, fix demonstrated leaks at shared runtime boundaries, and prove redaction with adversarial tests.
The collector is only a syntax-based search aid. It does not resolve Python aliases or control flow, certify policy guards, or prove that an absent candidate is safe.
src/agents/_debug.py, src/agents/logger.py, and the affected callers.Run the collector tests, then collect candidates:
uv run python .agents/skills/sensitive-logging-audit/scripts/test_inventory.py
uv run python .agents/skills/sensitive-logging-audit/scripts/inventory_logging.py \
--format json --output /tmp/sensitive-logging-candidates.json
The report intentionally contains no policy, safe, or guard classification.
The collector does not follow assignments such as emit = logger.error. Search the source directly and inspect aliases, callbacks, wrappers, and reflective dispatch:
rg -n '\.(debug|info|warning|warn|error|exception|critical|fatal|log)\b' src/agents
rg -n '\b(print|pprint|pp|warn|warn_explicit|write|writelines|print_exc|print_exception)\b' src/agents
rg -n 'DONT_LOG_(MODEL|TOOL)_DATA|log_(model|tool|model_and_tool)_action' src/agents
Do not turn collector coverage or a textual guard into a security conclusion. Trace producers and callers.
test cases passed, vs 8 / 15 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.