vercel-marketing-analytics
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of the @vercel/analytics package from the npm registry. This is the official library from Vercel, which is a recognized and trusted service provider.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data through URL query parameters and form inputs for tracking purposes.
- Ingestion points: useSearchParams() and formData.get() in SKILL.md.
- Boundary markers: None present in the provided snippets.
- Capability inventory: Calls to the track() function which transmits data to Vercel's analytics API.
- Sanitization: Data is processed and serialized by the @vercel/analytics SDK.
Audit Metadata