tracekit-vue-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local script
./scripts/run-tracekit-auth.shto check for existing authentication or to guide the user through a registration and verification flow. - [COMMAND_EXECUTION]: It provides instructions for using the
tracekitCLI tool to upload source maps as part of a post-build script inpackage.json. - [EXTERNAL_DOWNLOADS]: The installation steps involve downloading the
@tracekit/vuepackage from official package registries (npm or yarn), which is the expected behavior for integrating a third-party SDK. - [PROMPT_INJECTION]: The static analysis flag for concealment is a false positive; the instructions direct the agent to use an automated authentication flow instead of a manual one to improve user experience, rather than attempting to hide malicious actions.
Audit Metadata