server-side-tracking
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/process.py) that uses the Flask framework to create an event collection endpoint. It executes HTTP POST requests to Google and Meta endpoints using the standardrequestslibrary to forward tracking data. - [EXTERNAL_DOWNLOADS]: The skill requires standard, well-known Python packages (
flask,requests). The documentation and script correctly identify these dependencies for local installation. - [DATA_EXFILTRATION]: While the script forwards data to external endpoints (Google Analytics 4 and Meta Conversions API), these are well-known services. The implementation includes robust data minimization and privacy features, including SHA-256 hashing for email addresses and IP anonymization (zeroing octets or full removal) before any data is transmitted externally.
Audit Metadata