tracekit-angular-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly instructing the agent and user to use environment variables for API keys rather than hardcoding them in the application source.
- [EXTERNAL_DOWNLOADS]: The skill installs the
@tracekit/angularpackage from the official NPM registry. This package belongs to the vendor's official scope and is required for the integration. - [COMMAND_EXECUTION]: It utilizes a local script
./scripts/run-tracekit-auth.shand thetracekitCLI for managing authentication and uploading source maps, which are typical tasks for a developer SDK. - [DATA_EXFILTRATION]: The application is configured to report errors and traces to the vendor's endpoint at
https://app.tracekit.dev. This is the intended behavior of the monitoring service and does not constitute unauthorized data exfiltration. - [PROMPT_INJECTION]: The instruction to automate authentication checks rather than prompting the user for manual signup steps is a user experience optimization and does not represent an attempt to bypass security filters or hide malicious activity.
Audit Metadata