enable-analytics
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Official Package Dependencies: The skill installs well-known, official libraries including
@vercel/analytics,@vercel/speed-insights, and@next/third-partiesfrom public registries. These are standard dependencies for enabling analytics and third-party scripts in modern web applications. - Environment Variable Management: The skill uses the
NEXT_PUBLIC_GTM_IDenvironment variable to handle the Google Tag Manager identifier. This is a secure and recommended practice that avoids hardcoding configuration values directly into the codebase. - Standard Integration Patterns: The instructions utilize recommended Next.js integration components (such as
GoogleTagManagerfrom@next/third-parties/google) and specific subpaths like@vercel/analytics/next. These patterns are designed for performance and security within the intended framework. - Controlled Implementation: The skill includes explicit guardrails to ensure that analytics components are only rendered when specifically enabled or when valid identifiers are provided, preventing unintended execution of scripts.
Audit Metadata