analytics-tracking
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Includes reference implementation snippets for the Facebook Pixel that load scripts from official Meta domains (connect.facebook.net), which is a well-known service.
- [PROMPT_INJECTION]: Contains a potential surface for indirect prompt injection by instructing the agent to read context from '.claude/product-marketing-context.md'. * Ingestion points: '.claude/product-marketing-context.md' (referenced in SKILL.md). * Boundary markers: Absent. * Capability inventory: Provides implementation advice and technical code snippets. * Sanitization: Absent.
- [DATA_EXFILTRATION]: The skill requests access to local project context files to personalize analytics recommendations, which is a standard feature for this skill type.
Audit Metadata