analytics-tracking
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard implementation guidance and templates for well-known analytics platforms. It includes explicit warnings against the collection of Personally Identifiable Information (PII) and advocates for privacy compliance (GDPR/CCPA).
- [INDIRECT_PROMPT_INJECTION]: The skill references a local context file (
.claude/product-marketing-context.md) as a source of information. This constitutes a potential attack surface for indirect prompt injection if the ingested file contains malicious instructions. - Ingestion points: The skill reads
.claude/product-marketing-context.mdto establish business and marketing context (SKILL.md). - Boundary markers: No explicit delimiters or boundary markers are defined to separate ingested data from instructions.
- Capability inventory: The skill is primarily instructional and facilitates the generation of tracking plans and code snippets for the user.
- Sanitization: No sanitization or validation of the ingested context file content is performed.
Audit Metadata