Add Analytics
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: add-analytics Version: 0.1.0 The skill bundle is designed to integrate Google Analytics 4 into various web projects. All instructions in SKILL.md, including file system scanning, code modification, and environment variable handling, are directly aligned with this stated purpose. The external network calls are exclusively to legitimate Google Analytics endpoints (www.googletagmanager.com). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts to subvert the agent's intended function or access unrelated sensitive data. The skill even includes good security practices like adding `.env.local` to `.gitignore`.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may change application files to add analytics support.
The skill instructs the agent to modify project source files. This is central to adding analytics, but users should review the resulting code changes before committing or deploying.
Create `app/layout.tsx` modification or create `components/GoogleAnalytics.tsx` ... Modify `pages/_app.tsx`
Review the diff, confirm the Measurement ID, and test locally before deploying.
Your deployed site may begin sending pageview or event information to Google Analytics.
The generated code loads Google's analytics script and configures tracking. Once deployed, this change affects site visitors and can propagate through production builds.
script.src = `https://www.googletagmanager.com/gtag/js?id=${GA_MEASUREMENT_ID}` ... window.gtag('config', GA_MEASUREMENT_ID)Ensure analytics use is intentional, privacy notices are updated, and consent handling is enabled where required.