attribution
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides implementation runbooks for tracking user behavior but includes mandatory security guardrails. Specifically, it instructs developers to implement 'Anonymity guards' that check for PII (e.g., email-shaped strings) before data is passed to third-party domains.
- [COMMAND_EXECUTION]: The skill provides code snippets for link decoration and webhook handling in JavaScript, but these are intended for user implementation in production environments. The skill does not instruct the agent to execute autonomous or arbitrary shell commands.
- [EXTERNAL_DOWNLOADS]: The skill references official integrations and documentation for well-known and trusted marketing technology services including PostHog, Segment, Google Analytics, HubSpot, and Salesforce.
- [OBFUSCATION]: All instructions and code templates are provided in clear, human-readable text. No Base64 encoding, zero-width characters, or homoglyph-based attacks were detected in the files.
Audit Metadata