identify-visitors-on-your-site
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
linkbreakerslibrary for TypeScript and Python. These are vendor-provided SDKs used to interact with the Linkbreakers API. - [CREDENTIALS_UNSAFE]: The documentation includes placeholders for API tokens (
process.env.LINKBREAKERS_TOKEN) and correctly differentiates between secret and publishable keys to maintain security best practices for token management. - [INDIRECT_PROMPT_INJECTION]: The skill describes a pattern for capturing an
lbididentifier from a URL query parameter. This untrusted input is intended for use as an argument for the visitor identification API and is handled within the context of the user's application logic rather than the agent's internal instructions.
Audit Metadata