skills/jeremylongshore/claude-code-plugins-plus-skills/implementing-real-user-monitoring/Gen Agent Trust Hub
implementing-real-user-monitoring
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the provided skill files. The skill follows its stated purpose of assisting with RUM implementation without hidden behaviors.
- [COMMAND_EXECUTION]: The skill metadata defines allowed tools including
Bash(npm:*)andBash(rum:*). While these allow for command execution, they are restricted to standard package management and monitoring tool CLI patterns necessary for the skill's functionality. - [DATA_EXPOSURE]: No hardcoded secrets, API keys, or sensitive file paths were found. The Python script
setup_rum.pycreates local configuration files for project initialization using standard library functions. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external frontend code in the
{baseDir}/directory. While this presents a surface for indirect prompt injection if the ingested code contains malicious instructions, the skill does not currently possess high-risk automated execution capabilities that would escalate this beyond a standard operational risk.
Audit Metadata