analytics-tracking
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive guide and set of templates for analytics implementation, covering platforms like Google Analytics 4, Google Tag Manager, and Mixpanel. It does not contain executable code, dangerous commands, or network exfiltration patterns. It promotes security best practices by explicitly advising against the collection of Personally Identifiable Information (PII) and recommending the use of consent modes for privacy compliance.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read project context from
.agents/product-marketing-context.mdif available. While this involves ingesting external data, the risk is negligible as the skill lacks any high-risk capabilities (such as arbitrary code execution or file modification) that could be exploited via this ingestion surface. - Ingestion points: Reads from
.agents/product-marketing-context.mdor.claude/product-marketing-context.md. - Boundary markers: None specified for the context file reading.
- Capability inventory: No dangerous tools or shell commands are invoked by the skill instructions.
- Sanitization: None (standard for advisory/instructional content).
Audit Metadata