analytics
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and provides frameworks for analytics measurement, event naming, and implementation. It includes best practices for privacy and compliance, explicitly warning against the collection of PII (Personally Identifiable Information).
- [DATA_EXPOSURE]: No sensitive file access or credential exposure was detected. The skill provides code snippets for GA4 and GTM, which are standard, benign marketing tools.
- [INDIRECT_PROMPT_INJECTION]: While the skill instructions suggest reading an external context file (
.agents/product-marketing.md), there are no associated risky capabilities (such as writing to the file system or executing shell commands) that could be exploited via malicious content in that file. - [REMOTE_CODE_EXECUTION]: The skill contains JavaScript code blocks for GA4 and GTM implementation, but these are provided as examples for the user's web environment and are not executed by the agent itself in a dangerous manner.
Audit Metadata