analytics-tracking
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and reference materials are purely educational and provide standard code snippets for analytics implementation. No malicious intent or dangerous command execution patterns were identified.
- [EXTERNAL_DOWNLOADS]: The skill references official Google Analytics documentation and Meta (Facebook) Pixel tracking scripts. These are well-known services and the references are used for standard integration purposes.
- [PROMPT_INJECTION]: An indirect prompt injection surface is present due to the ingestion of external context files.
- Ingestion points: The skill reads
.agents/product-marketing-context.md(or.claude/product-marketing-context.md) to inform its implementation strategy. - Boundary markers: No specific delimiters or safety instructions are used to separate this context from the agent's core instructions.
- Capability inventory: The skill does not define dangerous capabilities or tools (such as shell execution or file writing) that could be abused by malicious content in the context file.
- Sanitization: No sanitization or validation of the ingested context file content is performed.
Audit Metadata