Scan Report
0 /100
agent-analytics
Run analytics end-to-end from your agent without opening a dashboard
Pure documentation skill wrapping a legitimate npm analytics CLI with transparent behavior and no security risks.
Safe to install
This skill is safe to use. No action required.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md: Requires npx for CLI execution |
| Network | READ | READ | ✓ Aligned | SKILL.md: CLI calls HTTPS API at agentanalytics.sh |
| Filesystem | NONE | NONE | — | No file operations in skill |
| Environment | NONE | NONE | — | No environment access in skill |
8 findings
Medium External URL 外部 URL
https://agentanalytics.sh SKILL.md:8 Medium External URL 外部 URL
https://www.npmjs.com/package/@agent-analytics/cli SKILL.md:35 Medium External URL 外部 URL
https://docs.agentanalytics.sh/api/ SKILL.md:59 Medium External URL 外部 URL
https://mysite.com SKILL.md:97 Medium External URL 外部 URL
https://api.agentanalytics.sh/tracker.js SKILL.md:204 Medium External URL 外部 URL
https://docs.agentanalytics.sh/ SKILL.md:258 Medium External URL 外部 URL
https://docs.agentanalytics.sh/reference/cli-mcp-api/ SKILL.md:260 Medium External URL 外部 URL
https://docs.agentanalytics.sh/installation/openclaw/ SKILL.md:261 File Tree
1 files · 12.3 KB · 261 lines Markdown 1f · 261L
└─
SKILL.md
Markdown
Security Positives
✓ Skill contains only documentation, no executable code
✓ Uses pinned npm package version (0.5.5) to prevent supply chain attacks
✓ Mandatory execution policy enforces official CLI path only
✓ Authentication via browser OAuth - no API key handling in chat
✓ Comprehensive documentation of all commands and behaviors
✓ Feedback mechanism for security concerns
✓ Query parameter validation documented (JSON filter validation)
✓ MIT licensed with public GitHub repository