plausible
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the Plausible Analytics API. It writes temporary JSON request bodies to/tmp/plausible_request.jsonbefore sending them via POST or PUT requests. This is standard behavior for a command-line based API integration.- [EXTERNAL_DOWNLOADS]: The skill makes network requests toplausible.ioand its subdomains (https://plausible.io/api/v2/query,https://plausible.io/api/v1/sites). These are the official endpoints for the Plausible Analytics service.- [DATA_EXFILTRATION]: Authenticated requests include a user-provided API token (PLAUSIBLE_TOKEN). The skill instructions correctly guide the user to set this as an environment variable and provide placeholders for site identifiers, representing typical usage for an analytics tool.
Audit Metadata