analytics-tracking

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: Provides implementation guidelines and code snippets for industry-standard analytics platforms like Google Analytics 4 (GA4) and Google Tag Manager (GTM). All external script references target well-known technology services.
  • [SAFE]: Promotes data security and privacy best practices, including explicit advice on avoiding PII collection and configuring GDPR-compliant consent modes.
  • [PROMPT_INJECTION]: The skill ingests marketing context to personalize recommendations, representing an indirect prompt injection surface. The risk is assessed as negligible because the skill lacks automated execution capabilities.
  • Ingestion points: Reads .agents/product-marketing-context.md as specified in the SKILL.md instructions.
  • Boundary markers: Not present.
  • Capability inventory: The skill does not possess capabilities for file modification, system command execution, or automated network operations; its function is limited to text and code snippet generation for the user.
  • Sanitization: Not implemented for the ingested marketing context.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 12:09 AM