analytics-integration
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no malicious code or instructions. It focuses on legitimate e-commerce tracking implementations using industry-standard tools and practices.
- [EXTERNAL_DOWNLOADS]: Recommends the installation of the
facebook-nodejs-business-sdkfor server-side conversion tracking, which is a verified library from a trusted organization (Meta). - [DATA_EXFILTRATION]: While the skill involves sending data to external analytics platforms (Google and Meta), these are standard business operations. The instructions specifically guide users to utilize the SDK's built-in hashing for PII (emails) to ensure data privacy.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were found. The skill properly instructs users to load sensitive information, such as Meta Access Tokens and GA4 API secrets, from environment variables.
- [COMMAND_EXECUTION]: Provides a
curltemplate for validating GA4 Measurement Protocol hits. The command is a standard debugging tool and uses placeholders for sensitive parameters.
Audit Metadata