clix-event-tracking — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited clix-event-tracking (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to help developers design and implement Clix event tracking via Clix.trackEvent(...) so events can drive event-triggered campaigns, audience filters, and personalization.
meaningful properties (funnel checkpoints, milestones, button taps).
values serialize to ISO 8601; unsupported objects become strings.
app stays robust.
If Clix MCP tools are available, treat them as the source of truth:
clix-mcp-server:search_docs for conceptual behavior (campaign triggers,personalization)
clix-mcp-server:search_sdk for exact SDK signatures per platformIf MCP tools are not available, use the bundled references:
references/trackevent-contract.mdreferences/naming-and-schema.mdreferences/implementation-patterns.mdreferences/campaign-mapping.mdreferences/debugging.mdEvent tracking progress:
- [ ] 1) Confirm platform(s) and goals (analytics vs campaign triggers)
- [ ] 2) Propose event plan (names, when fired, properties, where in code)
- [ ] 3) Validate plan (names, keys, types, PII constraints)
- [ ] 4) Implement trackEvent calls (platform-correct)
- [ ] 5) Verify: events fire once, serialize cleanly, match campaign configsAsk only what’s needed:
Return a compact table the user can approve:
snake_case)If campaigns are involved, remind: event names and property keys must match exactly in the Clix console.
Create event-plan.json in .clix/ directory (recommended) or project root:
Recommended location: .clix/event-plan.json
Alternative: event-plan.json in project root (simpler, but less organized)
For agents: Locate scripts/validate-event-plan.sh in the installed skill directory, then run it:
# From project root:
bash <skill-dir>/scripts/validate-event-plan.sh .clix/event-plan.json
# Or if in root:
bash <skill-dir>/scripts/validate-event-plan.sh event-plan.jsonThe skill directory is typically:
.cursor/skills/event-tracking/ (Cursor).claude/skills/event-tracking/ (Claude Code).vscode/skills/event-tracking/ (VS Code).agents/skills/event-tracking/ (Amp)If validation fails: fix the plan first, then implement.
Use MCP to fetch the exact trackEvent signature for the platform; then:
state updated)
See references/implementation-patterns.md for placement heuristics and code patterns.
Minimum verification:
For troubleshooting steps, see references/debugging.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.