mobile-analytics

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows secure patterns for integrating mobile analytics and crash reporting without introducing malicious code or dangerous execution patterns.
  • [CREDENTIALS_SAFE]: The skill correctly uses environment variables (e.g., process.env.EXPO_PUBLIC_SENTRY_DSN) and secure project secrets (eas secret:create) instead of hardcoding API keys or authentication tokens.
  • [EXTERNAL_DOWNLOADS]: Recommended dependencies, such as @sentry/react-native and posthog-react-native, are official SDKs from well-known service providers.
  • [DATA_EXPOSURE]: The skill includes explicit warnings in the 'Common Pitfalls' section to avoid logging PII like emails, passwords, or payment details in event properties.
  • [INDIRECT_PROMPT_INJECTION]: The workflow includes a dedicated section for GDPR and privacy compliance, encouraging user consent for session recording and analytics, which reduces the risk of unauthorized data collection.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 07:49 AM
Security Audit — agent-trust-hub — mobile-analytics