product-tracking-implement-tracking
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates locally by reading tracking plans and instrumentation guides from the .telemetry/ directory and generating code files in a project's tracking/ directory. It does not perform any unauthorized network operations or access sensitive system files outside its scope.- [EXTERNAL_DOWNLOADS]: The generated code and accompanying documentation reference well-known analytics SDKs and libraries, including Segment, Amplitude, Mixpanel, PostHog, and the author's own Accoil tracker. These are standard tools for the skill's intended purpose of product telemetry.- [COMMAND_EXECUTION]: The skill provides instructions for users to install necessary dependencies through standard package managers (e.g., npm, yarn) and suggests the use of environment variables for API keys, adhering to security best practices for credential management.- [DATA_EXFILTRATION]: While the skill's purpose is to generate code that transmits telemetry data to analytics providers, it does not exfiltrate sensitive user data or system information. The generated implementation patterns focus on event-driven product metrics as defined in the user's tracking plan.
Audit Metadata