53-tracking-setup-global
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a procedural guide for marketing professionals. Analysis across all threat categories (obfuscation, exfiltration, remote code execution, etc.) yielded no findings.
- [DATA_EXFILTRATION]: The skill correctly instructs users to hash sensitive CRM data (email, phone) before uploading to ad platforms, which is a recommended security and privacy practice. No hardcoded credentials or unauthorized network operations were found.
- [EXTERNAL_DOWNLOADS]: The skill references official Vietnamese legal databases (vbpl.vn and thuvienphapluat.vn) for compliance information, which are trusted official sources.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests user input through informational questions to generate a checklist, it lacks dangerous execution capabilities that would make it vulnerable to exploitation. Output is restricted to markdown text.
Audit Metadata