frontend-observability
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance and code snippets for a client-side observability system. It uses well-known and trusted libraries such as
web-vitalsand the Firebase SDK. - [DATA_EXFILTRATION]: While the skill's primary purpose is data collection (telemetry), it implements several security safeguards:
- It includes a mandatory consent gate (
hasConsent) at the fan-out boundary, ensuring no data is sent before user opt-in. - It explicitly mandates scrubbing Personally Identifiable Information (PII) from error reports and keeping event properties PII-light.
- All provider adapters are isolated within try-catch blocks to prevent a failure in one provider from affecting the application's stability.
- [EXTERNAL_DOWNLOADS]: The skill references well-known technology services and official repositories for analytics providers, including Google Analytics, Firebase, Microsoft Clarity, PostHog, and Sentry. These are standard industry tools for the described use case.
Audit Metadata