ae-generate-tracking-code

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various ae-cli commands to perform project-related tasks, including retrieving project information (ae-cli project info), managing configurations (ae-cli config), importing tracking templates (ae-cli tracking code import-template), and handling authentication (ae-cli auth).
  • [DYNAMIC_EXECUTION]: The skill is capable of generating tailored tracking code snippets and directly inserting them into the user's source code. This process involves searching for entry points and business logic triggers, followed by a structured insertion plan that requires user approval before modifications are applied via the Edit tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from tracking plans to drive its code generation logic.
  • Ingestion points: Reads project-level event and property definitions from .ae-cli/draft.xlsx, .ae-cli/draft.json, and .ae-cli/remote-plan.json.
  • Boundary markers: No explicit delimiter or 'ignore instructions' markers are specified for the ingested plan data.
  • Capability inventory: The skill has access to shell command execution through ae-cli, file system write capabilities via the Edit tool, and file delivery through the agent +add-attachment tool.
  • Sanitization: There is no explicit description of content sanitization or validation for the data ingested from the Excel or JSON plan files before it is used in code generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 07:56 AM