ionic-analytics
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install well-known and official analytics packages from the NPM registry:
@capacitor-firebase/app,@capacitor-firebase/analytics, andposthog-js. - [COMMAND_EXECUTION]: The documentation includes standard development commands such as
npm installandnpx cap sync, which are necessary for the setup and synchronization of mobile app dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill handles event taxonomy and data properties. While it processes data that could be influenced by external application states, it mitigates risk by instructing the user to avoid tracking PII and to use stable, enumerable values for event properties.
- [DATA_EXFILTRATION]: The skill facilitates the transmission of telemetry to established analytics providers (Firebase and PostHog). It includes specific guidance on privacy-preserving measures, such as respecting iOS App Tracking Transparency (ATT) and deferring tracking until user consent is obtained for EU/UK users.
Audit Metadata