ae-generate-tracking-code
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
ae-clicommand-line tool to manage project configurations, fetch tracking plans, and add file attachments. These operations are performed within the scope of the skill's purpose to facilitate data tracking integration. - [EXTERNAL_DOWNLOADS]: The skill fetches tracking plan data from the user-configured ThinkingData host via
ae-cli tracking plan fetch. It also provides links to official vendor documentation and software downloads (LogBus2) hosted on the vendor's official domain (thinkingdata.cn). - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted data from tracking plans (
.xlsxor remote plans) and interpolates this data into code generated via theEdittool. - Ingestion points:
.ae-cli/draft.xlsxand remote plan JSON fetched viaae-cli. - Boundary markers: The instructions specify that event and property names should be mapped strictly from the plan.
- Capability inventory: Uses the
Edittool to modify project source code andae-clifor environment management. - Sanitization: The skill relies on predefined templates for code generation, though it lacks explicit validation rules for user-supplied property or event names within those templates.
- [SAFE]: The skill incorporates safety checks, specifically requiring that the user's git workspace is clean before performing any automated code insertions to prevent accidental data loss or unreviewed changes.
Audit Metadata