agent-analytics

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and run the @agent-analytics/cli package from the npm registry.
  • [COMMAND_EXECUTION]: The agent executes various subcommands of the @agent-analytics/cli tool to manage projects, track events, and retrieve analytics insights.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from the analytics API via CLI commands, such as event logs and experiment recommendations.
  • Ingestion points: Data enters the agent's context through the output of commands like npx @agent-analytics/cli events or insights in SKILL.md.
  • Boundary markers: The instructions do not define specific delimiters for separating CLI output from agent instructions.
  • Capability inventory: The skill can execute shell commands via npx and modify source code to insert tracking snippets.
  • Sanitization: No specific sanitization or validation logic is described for the data fetched from the external analytics platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 03:43 PM