td-javascript-sdk

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for loading the SDK from the vendor's content delivery network at https://cdn.treasuredata.com/sdk/4.4.1/td.min.js. This is standard practice for browser-based analytics tools.
  • [DYNAMIC_EXECUTION]: The code includes a common JavaScript loader pattern that dynamically injects a script tag into the HTML document to fetch the library asynchronously. This is a legitimate implementation method for client-side SDKs to ensure non-blocking page loads.
  • [COMMAND_EXECUTION]: The skill references standard package installation using npm install td-js-sdk. The package name matches the official vendor namespace.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 07:21 AM
Security Audit — agent-trust-hub — td-javascript-sdk