Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-19T18:07:22Z, tree 3e4e22f08b580810d1f94af93aec69a9cd7d2180cb351a17346ef163ed812c74.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: setup-agent-analytics — 1 skill
slug: source-skills-434189763848ef5d81aa5c78
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 1 skill declaration. Ran 7 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): setup-agent-analytics"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/pendo-io/claude-pendo-plugin.git
documentation url: https://github.com/pendo-io/claude-pendo-plugin.git
commit: 340d503c23eed487be83693aa4c1837df4a7dcd4
tree sha256: 3e4e22f08b580810d1f94af93aec69a9cd7d2180cb351a17346ef163ed812c74
file sha256: {"plugins/setup-agent-analytics/.claude-plugin/plugin.json":"fb293808a3350e0d8687f75fc11ccaf63160363563fc1ae849b31dbf33f33c95","plugins/setup-agent-analytics/skills/setup-agent-analytics/SKILL.md":"2bcd7215496d9e28fdfc3e2a627b20408a27b9f779d07a489471ae354b4484a6"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-19T18:07:22Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-19
reviewed date: 2026-10-19
published date: 2026-10-19
modified date: 2026-10-19
reviewer: Machine-checked
harness version: toolwitness harness at commit 11dde7217ae6f8e4ac4d18a6380b18ba01450122
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 7 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-19T18:07:22Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"setup-agent-analytics — 1 skill","operatingSystem":"Not exercised","softwareVersion":"340d503c23eed487be83693aa4c1837df4a7dcd4"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 1 skill declaration. Ran 7 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): setup-agent-analytics"}],"evidence_sha256":{"LOCK.json":"d90b7b7adafc3d82adff1e24fc0403306e2e2d6a7fdd18887112fa5260e9f00b","commands.json":"c511743990acd780d6f4320f2edb74df8b40d9bb0528ac0d7285a2b38b45aa12","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"69e5fbf7be545bfa2e702f76bdb33f7b704d4d3e9e51bb360a2aa27288ae10a9","listing.json":"207ecf823081f8c631ac9f2374fd269e068c2c726e59fe0b3bded136a4640e29","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"2bccdfbb14e1298242ed60d066a7db54717f1dbe5680d67eeb96f7e1ca675bd7","date":"2026-10-19","gates":"333abb5ca9dc6c048c567bc48c88f95dcf0bee13928ed67c4cab8ff3eddd0738","grok":"3e35226e17f27a7a4d1ce7fbfa8c891a7b089a41d4bc77d7912fabedf66396e4","kind":"machine-checked","reviewed_sha256":"8abf43922869a41fccf36b403fd708b305dc4891dbba5f2015f951136c18431a","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 7 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "plugins/setup-agent-analytics/skills/setup-agent-analytics/SKILL.md",
        "name": "setup-agent-analytics",
        "description": "Set up Pendo agent analytics in a codebase — detect the AI agent(s) and instrument them so prompts, responses, and reactions flow to Pendo. Reads the codebase to choose the best of four installation paths: the Python SDK, the TypeScript SDK, client-side window.pendo.trackAgent(), or the server-side Conversations API. Use this whenever the user wants to add, install, wire up, or \"instrument\" Pendo agent analytics / agent tracking / trackAgent, mentions capturing LLM or chatbot conversations for Pendo, or asks how to get their AI agent's data into Pendo — even if they don't name the specific method.",
        "files": {
          "plugins/setup-agent-analytics/skills/setup-agent-analytics/SKILL.md": "2bcd7215496d9e28fdfc3e2a627b20408a27b9f779d07a489471ae354b4484a6"
        }
      }
    ],
    "hooks": [],
    "executions": []
  }
}

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-19

setup-agent-analytics — 1 skill

What declarations and files are present in this pinned source?

Review

What we ran

What we saw

Limits