segment
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides official Segment integration snippets. The browser-side script is the standard minified loader from
cdn.segment.com, and the Node.js implementation uses the official@segment/analytics-nodepackage. - [SAFE]: Sensitive credentials are not hardcoded. The skill correctly instructs the use of
process.env.SEGMENT_WRITE_KEYfor server-side initialization and uses the placeholderYOUR_WRITE_KEYfor client-side examples. - [COMMAND_EXECUTION]: Provides standard package manager commands (
npm install) for legitimate dependency installation. - [EXTERNAL_DOWNLOADS]: The browser snippet loads the Segment library from
https://cdn.segment.com/analytics.js/v1/, which is an official and well-known service endpoint for the Segment CDP.
Audit Metadata