gtm-setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gtm-setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Complete reference guide to Google Tag Manager event tracking, including dataLayer fundamentals, trigger and variable types, GA4 tag configuration, debug mode, and implementation best practices.
Full docs: https://cogny.com/docs/gtm-event-tracking
/gtm-setup # Full GTM reference overview
/gtm-setup dataLayer # dataLayer fundamentals and syntax
/gtm-setup purchase # Show purchase event dataLayer.push()
/gtm-setup triggers # All trigger types explained
/gtm-setup variables # All variable types explained
/gtm-setup tags # GA4 tag configuration
/gtm-setup debug # Debug mode and troubleshooting
/gtm-setup best practices # Naming conventions, organization
/gtm-setup common mistakes # Race conditions, missing data, duplicatesYou are a Google Tag Manager expert. Use this reference to help users implement event tracking, configure tags/triggers/variables, debug GTM issues, and follow best practices.
When the user asks a question, find the relevant section below and provide precise, actionable answers with ready-to-use code snippets.
If the user provides a specific topic as an argument, focus on that area. Otherwise, provide an overview of GTM concepts and ask what they need help with.
If Cogny GTM MCP tools are available, use them to inspect the user's actual GTM container, list their tags/triggers/variables, and provide recommendations based on their real configuration.
Works with zero accounts: everything below is reference and copy-paste code.
| Job | Without accounts | Enhanced when connected |
|---|---|---|
| Read the real container | — | GTM tool_list_tags, tool_list_triggers, tool_list_variables, tool_audit_container_privacy |
| Build tags / triggers / variables | user clicks it in GTM | GTM write tools (asks first; see "Building in the connected container") |
| Verify the event arrives | GTM Preview + DebugView | GA4 tool_run_realtime_report |
| Check a Custom HTML tag didn't break pages | Console | Microsoft Clarity get_live_insights (Script Error Count) |
The dataLayer is a JavaScript array that acts as a message bus between your website and GTM. When you push objects onto the dataLayer, GTM reads them to fire triggers and populate variables.
Declare the dataLayer before the GTM snippet to capture early pushes:
<script>
window.dataLayer = window.dataLayer || [];
</script>
<!-- GTM snippet follows -->// Push data AND fire a trigger (event key is required for trigger evaluation)
dataLayer.push({
'event': 'custom_event_name',
'key1': 'value1',
'key2': 'value2'
});
// Push data without firing a trigger (no 'event' key)
dataLayer.push({
'user_type': 'premium',
'user_id': '12345'
});Later pushes override earlier values for the same key. GTM's data model merges nested objects (and arrays, by index) recursively: only the keys you push are updated, everything else is kept.
dataLayer.push({ 'user': { 'name': 'John', 'plan': 'free' } });
dataLayer.push({ 'user': { 'plan': 'premium' } });
// Result: user = { name: 'John', plan: 'premium' } — user.name survivesThat recursive merge is why stale e-commerce data leaks from one event into the next, and why you push { ecommerce: null } first.
Always push null before e-commerce events to prevent stale data contamination:
dataLayer.push({ ecommerce: null });
dataLayer.push({
'event': 'view_item',
'ecommerce': {
'items': [{ 'item_id': 'SKU-001', 'item_name': 'Blue T-Shirt', 'price': 29.99 }]
}
});dataLayer.push({
'event': 'page_view',
'page_location': window.location.href,
'page_title': document.title,
'page_referrer': document.referrer,
'content_group': 'blog'
});For SPAs (React, Next.js, Vue), fire on route change:
useEffect(() => {
dataLayer.push({
'event': 'page_view',
'page_location': window.location.href,
'page_title': document.title
});
}, [location.pathname]);dataLayer.push({ ecommerce: null });
dataLayer.push({
'event': 'purchase',
'ecommerce': {
'transaction_id': 'T-20250211-001',
'value': 149.97,
'tax': 12.50,
'shipping': 5.99,
'currency': 'USD',
'coupon': 'SUMMER20',
'items': [
{
'item_id': 'SKU-001',
'item_name': 'Blue T-Shirt',
'item_brand': 'BrandName',
'item_category': 'Apparel',
'item_category2': 'T-Shirts',
'item_variant': 'Blue',
'price': 29.99,
'quantity': 2
},
{
'item_id': 'SKU-045',
'item_name': 'Running Shoes',
'item_brand': 'BrandName',
'item_category': 'Footwear',
'item_variant': 'Black/Size-10',
'price': 89.99,
'quantity': 1
}
]
}
});dataLayer.push({ ecommerce: null });
dataLayer.push({
'event': 'add_to_cart',
'ecommerce': {
'currency': 'USD',
'value': 29.99,
'items': [{
'item_id': 'SKU-001',
'item_name': 'Blue T-Shirt',
'item_brand': 'BrandName',
'item_category': 'Apparel',
'price': 29.99,
'quantity': 1
}]
}
});dataLayer.push({ ecommerce: null });
dataLayer.push({
'event': 'remove_from_cart',
'ecommerce': {
'currency': 'USD',
'value': 29.99,
'items': [{
'item_id': 'SKU-001',
'item_name': 'Blue T-Shirt',
'price': 29.99,
'quantity': 1
}]
}
});dataLayer.push({ ecommerce: null });
dataLayer.push({
'event': 'view_item',
'ecommerce': {
'currency': 'USD',
'value': 29.99,
'items': [{
'item_id': 'SKU-001',
'item_name': 'Blue T-Shirt',
'item_brand': 'BrandName',
'item_category': 'Apparel',
'price': 29.99
}]
}
});dataLayer.push({ ecommerce: null });
dataLayer.push({
'event': 'view_item_list',
'ecommerce': {
'item_list_id': 'category_apparel',
'item_list_name': 'Apparel',
'items': [
{ 'item_id': 'SKU-001', 'item_name': 'Blue T-Shirt', 'index': 0, 'price': 29.99 },
{ 'item_id': 'SKU-002', 'item_name': 'Red T-Shirt', 'index': 1, 'price': 29.99 }
]
}
});dataLayer.push({ ecommerce: null });
dataLayer.push({
'event': 'begin_checkout',
'ecommerce': {
'currency': 'USD',
'value': 149.97,
'coupon': 'SUMMER20',
'items': [
{ 'item_id': 'SKU-001', 'item_name': 'Blue T-Shirt', 'price': 29.99, 'quantity': 2 },
{ 'item_id': 'SKU-045', 'item_name': 'Running Shoes', 'price': 89.99, 'quantity': 1 }
]
}
});dataLayer.push({
'event': 'form_submit',
'form_id': 'contact_form',
'form_name': 'Contact Us',
'form_destination': '/thank-you'
});dataLayer.push({
'event': 'generate_lead',
'currency': 'USD',
'value': 50.00,
'lead_source': 'contact_form'
});dataLayer.push({ 'event': 'sign_up', 'method': 'google' });
dataLayer.push({ 'event': 'login', 'method': 'email' });dataLayer.push({
'event': 'search',
'search_term': 'blue t-shirt',
'search_results_count': 42
});dataLayer.push({
'event': 'scroll',
'percent_scrolled': 90
});// video_start
dataLayer.push({
'event': 'video_start',
'video_title': 'Product Demo',
'video_url': 'https://youtube.com/watch?v=abc123',
'video_provider': 'youtube',
'video_duration': 180
});
// video_progress
dataLayer.push({
'event': 'video_progress',
'video_title': 'Product Demo',
'video_percent': 50,
'video_current_time': 90,
'video_duration': 180
});
// video_complete
dataLayer.push({
'event': 'video_complete',
'video_title': 'Product Demo',
'video_duration': 180
});Listed in firing order:
| Sub-Type | Fires When | Use Case |
|---|---|---|
| Consent Initialization | Before every other trigger | CMP tag, consent mode defaults |
| Initialization | Before everything except Consent Initialization | Google tag, tags that set up shared config |
| Page View | gtm.js (immediately) | Page-load tags that don't need the DOM |
| DOM Ready | gtm.dom (DOM parsed) | Tags that read DOM elements |
| Window Loaded | gtm.load (all resources loaded) | Tags depending on images/scripts |
Filter by Page Path, Page Hostname, or Page URL.
| Sub-Type | Fires When | Use Case |
|---|---|---|
| All Elements | Any element clicked | Buttons, divs, images |
| Just Links | <a> element clicked | Outbound links, downloads |
Variables available: Click Element, Click Classes, Click ID, Click Target, Click URL, Click Text.
Fires when a specific event value is pushed to the dataLayer. Set Event Name to match the event key value. Supports regex (e.g., form_submit.*).
dataLayer.push({ 'event': 'form_submit' });
// Fires trigger where Event Name = "form_submit"Fires when an element enters the viewport.
| Setting | Description |
|---|---|
| Selection Method | CSS Selector or Element ID |
| When to fire | Once per page / once per element / every time |
| Minimum % visible | Default 50% |
| Minimum on-screen duration | Milliseconds |
Fires at a set interval (milliseconds). Configure a limit to cap the number of firings.
Fires at specified scroll thresholds (percentages or pixels). Supports vertical and horizontal.
Variables: Scroll Depth Threshold, Scroll Depth Units, Scroll Direction.
Built-in support for embedded YouTube videos. Captures: Start, Complete, Pause, Seeking, Buffering, Progress (at configurable thresholds).
Variables: Video Provider, Video Status, Video URL, Video Title, Video Duration, Video Current Time, Video Percent, Video Visible.
Fires on form submit. Options: Wait for Tags (delay submission up to 2000ms), Check Validation (only fire if browser validation passes).
Variables: Form Element, Form Classes, Form ID, Form Target, Form URL, Form Text.
Fires on URL fragment changes or pushState/replaceState. Essential for SPAs.
Variables: New History Fragment, Old History Fragment, New History State, Old History State, History Source.
Combine multiple triggers. Tag fires only when ALL triggers in the group have fired at least once during the page lifecycle.
Reads a value from the dataLayer by key name. Use dot notation for nested values (e.g., ecommerce.transaction_id). Always use Version 2.
Reads a global JS variable (e.g., document.title, navigator.language).
Reads text content or an attribute from a DOM element by CSS selector or ID.
Extracts URL components: Full URL, Protocol, Host Name, Port, Path, Query (with optional Query Key), Fragment.
Stores a fixed value. Use for Measurement IDs, Pixel IDs, and configuration strings shared across tags.
Runs an anonymous function and returns its value:
// Get viewport width
function() {
return window.innerWidth;
}// Classify page type from URL
function() {
var path = window.location.pathname;
if (path === '/') return 'homepage';
if (path.indexOf('/product/') === 0) return 'product';
if (path.indexOf('/category/') === 0) return 'category';
if (path.indexOf('/blog/') === 0) return 'blog';
if (path.indexOf('/checkout') === 0) return 'checkout';
return 'other';
}// Read a cookie
function() {
var match = document.cookie.match(new RegExp('(^| )user_segment=([^;]+)'));
return match ? match[2] : undefined;
}Maps input values (from another variable) to output values. Example: Page Path / maps to Homepage, /pricing to Pricing.
Like Lookup Table but uses regex patterns. Example: ^/product/.* maps to Product Page. Supports capture groups and case sensitivity settings.
Sets up the GA4 measurement stream (it replaced the old "GA4 Configuration" tag; existing ones were migrated automatically). Fire on Initialization - All Pages.
| Setting | Description |
|---|---|
| Tag ID | G-XXXXXXXXXX (use a Constant variable) |
| Configuration settings | Key/value pairs such as send_page_view, debug_mode, user_id (or a "Google Tag: Configuration Settings" variable) |
| Shared event settings | Parameters sent with every event (or a "Google Tag: Event Settings" variable) |
Sends a custom event to GA4.
| Setting | Description |
|---|---|
| Measurement ID | G-XXXXXXXXXX (same as the Google tag) |
| Event Name | GA4 event name (e.g., generate_lead) |
| Event Parameters | Key-value pairs (e.g., transaction_id, value) |
Runs arbitrary HTML/JavaScript. Always wrap in try/catch:
<script>
(function() {
try {
thirdPartySDK.track('event', { value: {{DLV - Value}} });
} catch (e) {
console.warn('GTM Custom HTML error:', e);
}
})();
</script>Fires a pixel request (1x1 image). Configure Image URL with tracking parameters. Enable cache busting.
Click Element, Click Classes, Click ID, Click Target, Click URL, Click Text
Form Element, Form Classes, Form ID, Form Target, Form URL, Form Text
Page URL, Page Hostname, Page Path, Referrer
Scroll Depth Threshold, Scroll Depth Units, Scroll Direction
Video Provider, Video Status, Video URL, Video Title, Video Duration, Video Current Time, Video Percent, Video Visible
Event, Environment Name, Container ID, Container Version, HTML ID, Random Number, Debug Mode
Click "Preview" in GTM workspace. Tag Assistant opens and shows:
// View entire dataLayer
console.table(dataLayer);
// Filter for specific events
dataLayer.filter(function(item) { return item.event === 'purchase'; });
// Watch pushes in real time
(function() {
var orig = dataLayer.push;
dataLayer.push = function() {
console.log('dataLayer.push:', arguments[0]);
return orig.apply(dataLayer, arguments);
};
})();Add debug_mode: true to your Google tag's configuration settings, then view events at GA4 Admin > DebugView.
Filter by collect in DevTools Network tab to see GA4 hits. Verify payload parameters.
If Cogny isn't connected, skip this and note what connecting adds.
tool_run_realtime_report (property_id,metrics: [eventCount], dimensions: [eventName]). The new event should appear within minutes of a test conversion. Missing: back to Preview.
get_live_insights(num_of_days: 1, metrics: [Script Error Count], dimensions: [URL]). A jump on the pages the tag fires on means the tag throws.
If Cogny isn't connected, skip this and note what connecting adds.
Every call below changes the container. Show the exact name, type and parameters, and wait for a yes before each batch. Never publish without a separate yes.
tool_create_workspace (account_id, container_id, name): work in a featureworkspace, not Default.
tool_create_variable (…, workspace_id, name, variable_type, parameters).tool_create_trigger (…, workspace_id, name, trigger_type, parameters).tool_create_tag (…, workspace_id, name, tag_type, parameters,firing_trigger_ids).
tool_create_version (…, workspace_id,name, notes).
tool_publish_version (account_id, container_id, version_id) only on an explicit"publish".
| Element | Convention | Example |
|---|---|---|
| Tags | [Platform] - [Action] - [Detail] | GA4 - Event - Purchase |
| Triggers | [Type] - [Condition] | CE - form_submit |
| Variables | [Type prefix] - [Name] | DLV - Transaction ID |
| Custom Events | snake_case | generate_lead |
| Folders | By platform or function | GA4, Meta, Consent |
GA4/
Google Tag - G-XXXX - All Pages
GA4 - Event - Purchase
GA4 - Event - Add to Cart
Meta/
Meta - Pixel - Base Code
Meta - Event - Purchase
Consent/
HTML - Consent Banner Init
HTML - Consent Mode UpdateQ1-2025-GA4-ecommerce)Use Tag Sequencing to ensure setup tags fire before dependent tags. Use tag firing priority (higher number = fires first) when order matters on the same trigger.
Consent is set with the gtag('consent', ...) command, not a dataLayer event. A dataLayer.push({event: 'consent_default', consent: {...}}) does nothing for consent mode. Put the default above the GTM snippet (or use a CMP template / consent-mode template on the Consent Initialization trigger, which calls setDefaultConsentState / updateConsentState).
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
// Default (before user choice)
gtag('consent', 'default', {
'ad_storage': 'denied',
'analytics_storage': 'denied',
'ad_user_data': 'denied',
'ad_personalization': 'denied'
});
// After user grants consent (from the banner's callback)
gtag('consent', 'update', {
'ad_storage': 'granted',
'analytics_storage': 'granted',
'ad_user_data': 'granted',
'ad_personalization': 'granted'
});Tags fire before dataLayer contains required data. Fix: use Custom Event triggers tied to the specific event push, not Page View triggers.
Tags fire on all pages instead of specific ones. Fix: always add trigger filters (e.g., Page Path equals /thank-you).
Stale data from previous pushes contaminates events. Fix: always dataLayer.push({ ecommerce: null }) before ecommerce events.
Same event sent multiple times. Causes: multiple triggers, conditions too broad, wrong firing option. Fix: use "Once per Page" or review trigger conditions.
JS errors in Custom HTML block other tags. Fix: wrap all Custom HTML in try/catch.
Causes: key name mismatch (case-sensitive), data pushed after trigger, wrong DLV version, incorrect dot-notation path.
Route changes not captured. Fix: use History Change trigger or push custom page_view events on route change:
// Next.js App Router
'use client';
import { usePathname } from 'next/navigation';
import { useEffect } from 'react';
export function GTMPageView() {
const pathname = usePathname();
useEffect(() => {
dataLayer.push({
'event': 'page_view',
'page_location': window.location.href,
'page_title': document.title
});
}, [pathname]);
return null;
}Users counted as new sessions across domains. Fix: configure cross-domain linker in the Google tag settings or GA4 Admin > Data Streams > Configure your domains.
Fix: add blocking trigger where Debug Mode equals true, or filter internal traffic via traffic_type parameter.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.