observability-scan

Analyzes logging, metrics, tracing, and telemetry code to map a codebase's observability posture.

3|1|Updated Aug 26, 2026
One-click install
npx skills add https://github.com/zeljkoobrenovic/sokrates-skills --skill observability-scan-zeljkoobrenovic
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: observability-scan
Source: https://github.com/zeljkoobrenovic/sokrates-skills/tree/main/skills/scanners/observability-scan
Command: npx skills add https://github.com/zeljkoobrenovic/sokrates-skills --skill observability-scan-zeljkoobrenovic

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Understanding what a codebase can reveal about itself in production requires reading scattered logging calls, metric definitions, tracing setup, and exporter configuration across the entire repository. This Skill automates that audit, producing a structured findings report on what signals exist, where telemetry data flows, what monitoring is possible, and which failure modes stay invisible. ## Core Features & Use Cases - Emission Surface Inventory: Greps for logging, metrics, tracing, and error-reporting vocabulary across Rust, JavaScript/TypeScript, and Python ecosystems, then reads initialization and exporter code closely. - Blind Spot Detection: Probes load-bearing paths for swallowed errors and silent failures, and infers what alerting and dashboards the emitted signals can or cannot support. - Privacy and Hygiene Audit: Flags sensitive data in logs, unbounded metric cardinality, telemetry defaults, and redaction gaps with calibrated severity levels. - Use Case: Point it at a repository with a Sokrates analysis to receive a validated observability-scan.json report plus an interactive HTML explorer summarizing the system's monitoring posture. ## Quick Start Run an observability scan on this repository and tell me what monitoring and alerting its telemetry can support and where its blind spots are.

Frequently Asked Questions about observability-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit logging and monitoring in a codebase?

Run this scanner against the repository: it greps for logging, metrics, and tracing call sites, reads the exporter and subscriber setup code, and produces a findings report covering signal coverage, hygiene issues, and monitoring blind spots.

How to find swallowed errors and silent failures in code?

The scanner probes load-bearing paths for error-swallowing patterns such as empty catch blocks, discarded Results, and logged-then-dropped errors. Findings are reported under error-reporting as gaps in what operators can see.

Does this observability audit work without a Sokrates analysis?

Yes, it degrades gracefully without one. A _sokrates folder improves results by supplying hotspots and tech-stack findings, but the scanner can inventory telemetry directly from source code.

What languages and telemetry libraries are supported?

The scanner recognizes telemetry vocabulary for Rust (tracing, metrics, sentry, opentelemetry), JavaScript/TypeScript (pino, winston, Sentry, OpenTelemetry), and Python (logging, structlog, sentry_sdk, prometheus_client).

Can it detect privacy risks in telemetry data?

Yes, it follows where telemetry data leaves the process and flags sensitive user content in logs, missing redaction, on-by-default telemetry, and unbounded metric cardinality with severity calibrated to the exposure.