rum-tracking
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill promotes robust privacy practices, including detailed rules for stripping PII (Personally Identifiable Information) from tracking events and implementing mandatory consent gates before any telemetry is sent.
- [EXTERNAL_DOWNLOADS]: The skill references official GitHub repositories and documentation for Dash0, a well-known observability service, to provide OpenTelemetry guidance. These references target a well-known service and are provided for educational and configuration purposes.
- [COMMAND_EXECUTION]: The skill includes shell command examples (e.g.,
grepfor auditing) and mentions platform-specific skill invocation (Skill()), but these are used contextually for auditing and instrumentation guidance rather than as a vector for malicious execution. - [DATA_EXFILTRATION]: The skill provides templates that send data to analytics destinations. However, it explicitly includes strict rules in
rules/pii-and-compliance.mdto prevent the exfiltration of sensitive data like auth tokens, passwords, or PII, recommending opaque identifiers and sanitization instead.
Audit Metadata