analytics-tracking

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard implementation guidance and templates for well-known analytics platforms. It includes explicit warnings against the collection of Personally Identifiable Information (PII) and advocates for privacy compliance (GDPR/CCPA).
  • [INDIRECT_PROMPT_INJECTION]: The skill references a local context file (.claude/product-marketing-context.md) as a source of information. This constitutes a potential attack surface for indirect prompt injection if the ingested file contains malicious instructions.
  • Ingestion points: The skill reads .claude/product-marketing-context.md to establish business and marketing context (SKILL.md).
  • Boundary markers: No explicit delimiters or boundary markers are defined to separate ingested data from instructions.
  • Capability inventory: The skill is primarily instructional and facilitates the generation of tracking plans and code snippets for the user.
  • Sanitization: No sanitization or validation of the ingested context file content is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 12:37 PM