analytics-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known libraries from public registries such as
posthog-js,posthog-node,@sentry/nextjs, and@sentry/react-native. These are official packages for established services and do not pose a security risk. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing the user to use environment variables (
process.env.POSTHOG_KEY,process.env.NEXT_PUBLIC_SENTRY_DSN) rather than hardcoding sensitive credentials. - [DATA_EXFILTRATION]: The skill explicitly mentions a privacy best practice: 'Never capture PII as event names — use properties'. It also enables
maskAllInputs: truein PostHog session recordings by default to prevent accidental data exposure. - [COMMAND_EXECUTION]: The shell commands provided are standard installation commands (
pnpm add,npx expo install) and a well-known setup wizard (npx @sentry/wizard@latest).
Audit Metadata