agent-analytics

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @agent-analytics/cli package from the official NPM registry. This is the expected behavior for a CLI-based integration and aligns with the skill's stated purpose.
  • [COMMAND_EXECUTION]: Instructs the agent to run various analytics commands (e.g., stats, live, funnel) through the @agent-analytics/cli. These commands are scoped to the analytics platform's functionality.
  • [CREDENTIALS_UNSAFE]: Appropriately manages secrets by requiring the AGENT_ANALYTICS_API_KEY environment variable. It provides a standard CLI login flow for local authentication.
  • [DATA_EXFILTRATION]: No malicious data exfiltration was detected. The network traffic is limited to sending analytics events and fetching reports from the vendor's domain (agentanalytics.sh).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 04:24 PM
Security Audit — agent-trust-hub — agent-analytics