cookie-consent
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill provides standard implementation patterns for cookie consent and privacy management, adhering to GDPR and ePrivacy requirements.
- [EXTERNAL_DOWNLOADS]: The
lib/consent.tsfile includes functionality to dynamically load the Google Analytics script fromhttps://www.googletagmanager.com/gtag/js. This is a well-known service and the script injection is gated by user consent preferences. - [DATA_EXFILTRATION]: The
saveConsentfunction inlib/consent.tstransmits consent records to a local/api/consentendpoint via a POST request. This is a legitimate operation for maintaining an audit trail of user choices. - [SAFE]: The server-side code in
app/api/consent/route.tsdemonstrates privacy-conscious data handling by salting and hashing IP addresses usingnode:cryptorather than storing raw personal identifiers.
Audit Metadata