cookie-consent

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [SAFE]: The skill provides standard implementation patterns for cookie consent and privacy management, adhering to GDPR and ePrivacy requirements.
  • [EXTERNAL_DOWNLOADS]: The lib/consent.ts file includes functionality to dynamically load the Google Analytics script from https://www.googletagmanager.com/gtag/js. This is a well-known service and the script injection is gated by user consent preferences.
  • [DATA_EXFILTRATION]: The saveConsent function in lib/consent.ts transmits consent records to a local /api/consent endpoint via a POST request. This is a legitimate operation for maintaining an audit trail of user choices.
  • [SAFE]: The server-side code in app/api/consent/route.ts demonstrates privacy-conscious data handling by salting and hashing IP addresses using node:crypto rather than storing raw personal identifiers.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 03:15 AM