📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills segment-cdp
📦
segment-cdp
Content revision r2 High Risk ⚙️ External commands🌐 Network access🔑 Env variables
Build Reliable Segment CDP Tracking
Inconsistent analytics events weaken reporting and customer profiles. This skill provides Segment patterns for browser, server, identity, routing, governance, and HTTP tracking.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "segment-cdp" from https://skillstore.io/skills/sickn33-segment-cdp.md and its manifest at https://skillstore.io/api/skills/sickn33-segment-cdp/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "segment-cdp". Design events for a subscription checkout.
Expected outcome:
- Plan Selected records the selected plan, billing interval, and source.
- Checkout Started records the checkout identifier, amount, and currency.
- Subscription Started records the subscription identifier, plan, amount, and interval.
Using "segment-cdp". Review identity handling for a shared browser.
Expected outcome:
Identify the user after authentication, preserve anonymous history during the merge, and reset Analytics.js during logout to prevent cross-user attribution.
Using "segment-cdp". Limit personal data to trusted destinations.
Expected outcome:
Disable all destinations by default for identity calls, then enable only approved CRM and warehouse destinations that meet the data policy.
Security Audit
High Riskv5 • 8/26/2026 Open versioned report
The static alerts are false positives caused by documented TypeScript examples, expected Segment API communication, normal environment configuration, and tracking-plan terminology. Two high-confidence semantic findings remain: the examples omit Stripe webhook verification and expose an unauthenticated edge tracking proxy that could permit forged analytics events.
1
Files scanned
855
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Stripe Webhook Verification Omitted
The Stripe webhook example parses and processes request JSON without verifying a Stripe signature. A copied implementation could accept forged purchase and subscription events, corrupting customer profiles and analytics.
The complete webhook handler is shown, and no signature verification occurs before the body controls tracked events. The route is explicitly presented as a Stripe webhook example.
High
Unauthenticated Analytics Proxy Example
The Cloudflare Worker example accepts userId, action, and data from any request and forwards them to Segment without authentication, schema validation, or rate limiting. Attackers could forge events, poison analytics, or increase ingestion costs.
The handler directly destructures untrusted request JSON and passes every field to httpTrack. No access control or validation is present in the documented example.
Risk Factors
⚙️ External commands (2)
🌐 Network access (3)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-segment-cdp/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-segment-cdp?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-segment-cdp?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-segment-cdp/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-segment-cdp.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). segment-cdp security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-segment-cdp/audits/5BibTeX citation
@techreport{sickn33-sickn33-segment-cdp-2026,
author = {sickn33},
title = {segment-cdp security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-segment-cdp/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "segment-cdp security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-08-26"
url: "https://skillstore.io/skills/sickn33-segment-cdp/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-segment-cdp:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
68
Community
74
Spec Compliance
What You Can Build
Add Product Analytics
Create consistent browser events, page views, and user identification for a Next.js product.
Track Backend Revenue
Design reliable server events for purchases, subscriptions, and webhook-driven activity.
Govern Customer Data
Define tracking plans, required properties, identity rules, and destination controls.
Try These Prompts
Create a Basic Event
Create a Segment Analytics.js event for [user action] with the properties [property list]. Use a static Object Action event name.
Design a Tracking Plan
Design a Segment tracking plan for [product area]. Include event names, descriptions, required properties, types, and naming rules.
Implement Identity Flow
Design a Segment identity flow for [application]. Cover anonymous activity, signup, login, logout reset, aliases, and organization groups.
Review a Production Architecture
Review this Segment architecture: [details]. Assess consent, PII routing, schemas, retries, batching, webhook verification, endpoint authentication, and destination controls.
Best Practices
- Use static Object Action event names and place changing values in properties.
- Define required properties and types in a tracking plan before implementation.
- Gate tracking on consent and restrict personal data to approved destinations.
Avoid
- Do not build event names from user values or product identifiers.
- Do not accept webhook or edge tracking requests without verification and validation.
- Do not send personal data to every destination by default.
Frequently Asked Questions
Does this skill support browser and server tracking?
Yes. It covers Analytics.js, the Node.js SDK, direct HTTP requests, and edge environments.
Can it create a Segment tracking plan?
It can draft event schemas, required properties, types, and naming conventions for review and implementation.
Does it configure my Segment workspace?
No. Workspace sources, destinations, and Protocols settings still require configuration through Segment tools.
How does it handle user identity?
It explains anonymous IDs, identify calls, aliases, group calls, and logout reset requirements.
Does it provide consent management?
No. It identifies consent as required, but the application must integrate and enforce an appropriate consent system.
Are the examples ready for production?
No. Add authentication, validation, signature checks, rate limits, error handling, privacy controls, and environment-specific tests.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
4804b3d672af16b8afca785bbb6c5d7c7400a78f
Maintenance freshness
8/26/2026
Usage
13 downloads · 84 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
mixpanel-analytics
77Implement MixPanel Analytics Safely
by DiversioTeam
Analytics events often drift from schema, PII, and registration standards. This skill guides MixPanel implementation and review for Django optimo_analytics workflows.
Data & Analytics View
📦
senior-data-scientist
81Design Data Science Experiments and Models
by alirezarezvani
Data science projects often fail when experiments, features, and models lack clear statistical structure. This skill gives Claude, Codex, and Claude Code guided workflows for experimentation, feature engineering, and model review.
Data & Analytics View
📦
data-storytelling
79Transform Data Into Decision Stories
by wshobson
Raw metrics often fail to guide stakeholder decisions. This skill turns analysis into clear narratives, visual structures, and action plans.
Data & Analytics View
📦
sql-queries-tool
79Generate SQL Queries for DBX Studio
by Dbxstudio
Database users need reliable SQL that matches their connection type and schema. This skill guides Claude, Codex, and Claude Code to inspect schemas, write read-only queries, and explain results clearly.
Data & Analytics View
📦
data-orchestrator
79Coordinate Data Pipelines and Quality Checks
by Brownbull
Data pipeline work can become inconsistent when ingestion, features, quality, and reporting are planned separately. This skill organizes data tasks around pipeline context, quality gates, lineage, and handoffs.
Data & Analytics View
📦
looker-studio-bigquery
78Build Looker Studio Dashboards with BigQuery
by supercent-io
BigQuery dashboards can become slow, costly, and hard to govern. This skill helps create Looker Studio data sources, SQL models, filters, layouts, and access controls.
Data & Analytics View