Mixpanel
ReviewAudited by ClawScan on May 1, 2026.
Overview
This is a coherent Mixpanel analytics skill, but it will use a Mixpanel service-account secret and may store analytics context locally for future use.
Install only if you are comfortable letting the agent query your Mixpanel project. Configure a limited Mixpanel service account through environment variables, do not paste secrets into chat, and periodically review or clear ~/mixpanel/ if analytics results or user-level data should not be retained.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using the configured environment can query Mixpanel analytics for the configured project, including potentially sensitive business or user data.
The skill needs a Mixpanel service-account secret and project ID to query the user's Mixpanel account, which is expected for the stated purpose but grants access to analytics data.
Requires a Mixpanel Service Account: export MP_SERVICE_ACCOUNT="your-service-account" ... export MP_SERVICE_SECRET="your-service-secret" ... export MP_PROJECT_ID="123456"
Use a least-privilege Mixpanel service account scoped to the intended project, keep the secret out of chat and files, and rotate it if it may have been exposed.
Product context, saved queries, insights, and possibly query results may remain on disk and influence future conversations or analyses.
The skill persistently stores Mixpanel context and cached results locally, which supports the analytics workflow but may retain sensitive analytics outputs across sessions.
Memory lives in `~/mixpanel/` ... Query results cached in ~/mixpanel/
Review the contents of ~/mixpanel/ periodically, avoid saving raw personal data or credentials, and delete or redact cached results that should not persist.