Analytics & Tracking Setup

Track events and user behavior using Segment.

Security Scan

The package presents itself as Segment-based event tracking but its files contain only UTM/pixel templates and a simple UTM CLI; there is a mismatch between the claimed capability and the actual code/instructions.

Purpose & Capability

The skill is titled and described as "Track events and user behavior using Segment," and SKILL.md shows CLI commands like `analytics-tracking track`/`identify`/`group`. However, the repository contains only a UTM builder, pixel config JSON files and a tracking plan—no Segment SDK calls, no network code for sending events, and no environment variables or primary credential for a Segment write key. The stated purpose (automated Segment event tracking) is not implemented by the included artifacts.

Instruction Scope

Runtime instructions mostly show examples for building UTM links and copy-paste pixel snippets. They also demonstrate a CLI named `analytics-tracking` (track/identify/group) that is not present in the files. SKILL.md does not instruct the agent to read system files or exfiltrate secrets. The inconsistency is about missing/opaque runtime behavior rather than malicious actions in the instructions themselves.

Install Mechanism

There is no install specification (instruction-only plus a small Python script). No external downloads, package manager installs, or archive extraction are present. The only code uses the Python standard library (urllib) and is low-risk to install/run locally.

Credentials

No environment variables or credentials are requested. That is appropriate for a UTM builder and static templates—but inconsistent with the claim to "use Segment" or to perform event tracking. A legitimate Segment-integrating skill would request a SEGMENT_WRITE_KEY (or similar) and include code to use it; those are missing. This mismatch could lead to confusion or to users supplying credentials to a different/unknown implementation later.

Persistence & Privilege

The skill does not request persistent presence (always is false) and contains no install behavior that modifies other skills or system-wide configuration. There is no autonomous elevation of privilege indicated.

What to consider before installing

This package looks like a collection of tracking documentation, UTM link generator, and pixel snippet templates—not an autonomous Segment event sender. If you expected a skill that actually sends events to Segment, do NOT hand over any Segment write keys yet: the code to use them is not present. Actions you can take before installing or using it: - If you only need a UTM builder or pixel snippets, it's safe to run the included utm_builder.py locally (Python 3.8+, standard library only). - If you expect Segment integration, ask the author for the code that calls Segment (analytics-python or HTTP API), or for explicit env var names (e.g., SEGMENT_WRITE_KEY). The absence of those is an incoherence to resolve. - Verify that any future version which claims to send events clearly documents network endpoints and required credentials and that you review that code before providing secrets. - Do not provide credentials blindly; prefer skills that explicitly declare required env vars and show how they are used.

Analytics Tracking

Track events and user behavior using Segment.

Usage

Track an event

analytics-tracking track \
  --event "Signed Up" \
  --user-id "user-123" \
  --properties '{"plan":"Pro"}'

Identify a user

analytics-tracking identify \
  --user-id "user-123" \
  --traits '{"name":"John Doe","email":"[e-mail]"}'

Create a group

analytics-tracking group \
  --user-id "user-123" \
  --group-id "group-abc" \
  --traits '{"name":"Acme Inc."}'