analytics-tracking
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: Provides implementation guidelines and code snippets for industry-standard analytics platforms like Google Analytics 4 (GA4) and Google Tag Manager (GTM). All external script references target well-known technology services.
- [SAFE]: Promotes data security and privacy best practices, including explicit advice on avoiding PII collection and configuring GDPR-compliant consent modes.
- [PROMPT_INJECTION]: The skill ingests marketing context to personalize recommendations, representing an indirect prompt injection surface. The risk is assessed as negligible because the skill lacks automated execution capabilities.
- Ingestion points: Reads
.agents/product-marketing-context.mdas specified in theSKILL.mdinstructions. - Boundary markers: Not present.
- Capability inventory: The skill does not possess capabilities for file modification, system command execution, or automated network operations; its function is limited to text and code snippet generation for the user.
- Sanitization: Not implemented for the ingested marketing context.
Audit Metadata