Add Analytics

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

The agent may change application files to add analytics support.

Why it was flagged

The skill instructs the agent to modify project source files. This is central to adding analytics, but users should review the resulting code changes before committing or deploying.

Skill content

Create `app/layout.tsx` modification or create `components/GoogleAnalytics.tsx` ... Modify `pages/_app.tsx`

Recommendation

Review the diff, confirm the Measurement ID, and test locally before deploying.

NoteHigh Confidence

ASI08: Cascading Failures

What this means

Your deployed site may begin sending pageview or event information to Google Analytics.

Why it was flagged

The generated code loads Google's analytics script and configures tracking. Once deployed, this change affects site visitors and can propagate through production builds.

Skill content

script.src = `https://www.googletagmanager.com/gtag/js?id=${GA_MEASUREMENT_ID}` ... window.gtag('config', GA_MEASUREMENT_ID)

Recommendation

Ensure analytics use is intentional, privacy notices are updated, and consent handling is enabled where required.