analytics
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to install official Node.js client libraries for reputable services including Vercel Analytics, PostHog, and Mixpanel. These packages facilitate standard analytics integration.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a framework for the agent to handle user requests regarding analytics implementation, which involves modifying local code and managing dependencies.
- Ingestion points: User queries related to event tracking, analytics setup, or provider migrations.
- Boundary markers: Absent from the code templates.
- Capability inventory: Writing to
lib/analytics.tsandapp/layout.tsx, and executing package installation commands (npm install). - Sanitization: The skill includes explicit instructions for the agent to ensure that sensitive data like emails or full names are not included in tracking properties sent to third-party providers.
Audit Metadata