analytics-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and implementation guide for various analytics platforms. It does not perform any direct operations on the host system.
- [EXTERNAL_DOWNLOADS]: The Google Tag Manager reference guide contains a standard Facebook Pixel implementation snippet that loads a script from
https://connect.facebook.net/en_US/fbevents.js. This is a well-known service used for tracking and the reference is documented neutrally. - [DATA_EXPOSURE]: The skill provides templates for capturing
user_idand other analytics parameters from cookies or JavaScript objects. It includes explicit safeguards and warnings against the collection of PII (Personally Identifiable Information) and provides a section on privacy compliance and consent management. - [INDIRECT_PROMPT_INJECTION]: The skill checks for a local context file (
.claude/product-marketing-context.md) to inform its implementation strategy. This represents a standard surface for ingesting project metadata and is handled as an informational input with no high-risk capabilities associated with it.
Audit Metadata