analytics
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data access behaviors were detected across the skill files.
- [DATA_EXPOSURE]: The skill instructs the agent to read context from project-specific files like
.agents/product-marketing.md. This is a standard practice for project-aware agents to minimize repetitive questioning and does not constitute a security risk. - [REMOTE_CODE_EXECUTION]: While the skill contains JavaScript snippets (e.g., GA4 and Facebook Pixel tracking code), these are provided as educational templates for the user to implement on their own web properties and are not executed by the agent itself.
- [EXTERNAL_DOWNLOADS]: References to external documentation (Google Support) and official tracking scripts (Facebook Pixel) are from well-known, trusted services and are documented neutrally for the user's implementation.
Audit Metadata