tracking-scripts
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several well-known tracking and consent management services, including Google Analytics (GA4), Meta (Facebook Pixel), Cookiebot, Termly, Converge, and Contentsquare. These are legitimate external resources used for website analytics and regulatory compliance.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by having the agent ingest tracking snippets provided by the user and inserting them into the site's configuration.
- Ingestion points: Third-party JavaScript snippets provided by users in the chat interface (e.g., Triple Whale or Elevar headless snippets).
- Boundary markers: The instructions do not specify explicit delimiters for the user-provided snippets.
- Capability inventory: The agent is authorized to modify the site's
app/layout.tsxfile to update the tracking registry. - Sanitization: The skill relies on the agent's ability to identify valid JavaScript snippets and provides guidelines for their placement, though it does not mandate automated sanitization of the input content.
Audit Metadata