rum-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is primarily an advisory tool for product analytics and RUM tracking, providing architectural patterns and code templates for web (Next.js) and mobile (React Native/Expo) apps.- [SAFE]: Extensive documentation is provided for PII (Personally Identifiable Information) protection and regulatory compliance, including mandatory consent gates, identifier hashing (HMAC), and sanitization of URLs and exception messages.- [EXTERNAL_DOWNLOADS]: The skill references external agent skills for OpenTelemetry semantic conventions and instrumentation from the dash0hq/agent-skills GitHub repository. These are documented as authoritative dependencies for specialized telemetry guidance.- [INDIRECT_PROMPT_INJECTION]: The skill uses a composition pattern to invoke related skills for specialized telemetry standards.
- Ingestion points: User-provided tracking requirements and project telemetry context processed in SKILL.md.
- Boundary markers: The skill provides explicit rules for sanitizing user-provided data and stripping sensitive parameters (rules/pii-and-compliance.md).
- Capability inventory: Code template generation and invocation of secondary skills via internal directives (otel-conventions.md).
- Sanitization: All telemetry signals are subject to mandatory scrubbing and masking rules defined in the skill body.
Audit Metadata