agent-analytics
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and run the@agent-analytics/clipackage from the npm registry. - [COMMAND_EXECUTION]: The agent executes various subcommands of the
@agent-analytics/clitool to manage projects, track events, and retrieve analytics insights. - [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from the analytics API via CLI commands, such as event logs and experiment recommendations.
- Ingestion points: Data enters the agent's context through the output of commands like
npx @agent-analytics/cli eventsorinsightsinSKILL.md. - Boundary markers: The instructions do not define specific delimiters for separating CLI output from agent instructions.
- Capability inventory: The skill can execute shell commands via
npxand modify source code to insert tracking snippets. - Sanitization: No specific sanitization or validation logic is described for the data fetched from the external analytics platform.
Audit Metadata