Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-19T18:07:22Z, tree 4276ceb9398d3d7b34ff1535cfd28190fc8242eec898ef5f9b2c7f3a7609cf5b.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: setup-mcp-agent-analytics — 1 skill
slug: source-skills-712b604a40e509dd52c5dfb0
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 1 skill declaration. Ran 7 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): setup-mcp-agent-analytics"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/pendo-io/claude-pendo-plugin.git
documentation url: https://github.com/pendo-io/claude-pendo-plugin.git
commit: a0f85260c61b93c4511f59545612323a41c3f845
tree sha256: 4276ceb9398d3d7b34ff1535cfd28190fc8242eec898ef5f9b2c7f3a7609cf5b
file sha256: {"plugins/setup-mcp-agent-analytics/.claude-plugin/plugin.json":"96d0bbb67f6e0f9df0f10bdab1e0522caf442050dd976935e2db28b4ba5908d2","plugins/setup-mcp-agent-analytics/skills/setup-mcp-agent-analytics/SKILL.md":"20bf74c791e8c07f41973a2349e5b98ceee89bc3dffa0789553ccbe27803264b"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-19T18:07:22Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-19
reviewed date: 2026-10-19
published date: 2026-10-19
modified date: 2026-10-19
reviewer: Machine-checked
harness version: toolwitness harness at commit 11dde7217ae6f8e4ac4d18a6380b18ba01450122
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 7 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-19T18:07:22Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"setup-mcp-agent-analytics — 1 skill","operatingSystem":"Not exercised","softwareVersion":"a0f85260c61b93c4511f59545612323a41c3f845"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 1 skill declaration. Ran 7 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): setup-mcp-agent-analytics"}],"evidence_sha256":{"LOCK.json":"f00f41dfc8d73efa7cae873091bd9d48a7037f17aebd5930bfb97fe1ceee6671","commands.json":"ca3601f8a31352cfe41a1857d085dc000321463597e3a60751b6c8d281de47e6","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"ccc5537e9d8613f2fdfdbd4a7ef5de8b8f51c48fb84bafa010842018b6403b2e","listing.json":"c1bec9e50aa6ad77804731ba96e500eb15bec2651c6a367e8fb95f77c15409f1","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"6fc4a8a2a0ae78e25b81e8afae9b5656b932939c9d288394adeb6a4952ed0909","date":"2026-10-19","gates":"3c03d4d38163ac356436b04623386bc72771f34c0ef74c1151b6e0af4d3057f6","grok":"76973d8effa3df9d529804f9fb9327173078a6ad1792466e03517612eedd6441","kind":"machine-checked","reviewed_sha256":"9eabc9b1fe6f8908fbab1e7a96321ccc1a9f5ebd47c6bb6c9128c825b1204db2","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 7 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "plugins/setup-mcp-agent-analytics/skills/setup-mcp-agent-analytics/SKILL.md",
        "name": "setup-mcp-agent-analytics",
        "description": "Instrument an MCP server with Pendo MCP analytics in Python, TypeScript, Go, or Java. Detects which language/SDK the server is built with and wires up the matching Pendo integration — PendoMCPServer (Python), initMcp() (TypeScript), gosdk.Instrument() (Go), or PendoMcpServer.wrapAll() (Java, io.pendo:pendo-sdk-mcp) — then verifies data is flowing to Pendo Agent Analytics. Use this whenever the user wants Pendo analytics on an MCP server, mentions \"MCP analytics\", \"track MCP tool calls\", \"PendoMCPServer\", \"PendoMcpServer\", \"initMcp\", \"pendo-sdk-mcp\", \"instrument my MCP server\", or has an MCP server (including a Spring AI MCP server) and asks for Pendo/agent analytics — even if they don't say \"MCP analytics\" verbatim. NOT for instrumenting regular (non-MCP) agents — use setup-agent-analytics for that.",
        "files": {
          "plugins/setup-mcp-agent-analytics/skills/setup-mcp-agent-analytics/SKILL.md": "20bf74c791e8c07f41973a2349e5b98ceee89bc3dffa0789553ccbe27803264b"
        }
      }
    ],
    "hooks": [],
    "executions": []
  }
}

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-19

setup-mcp-agent-analytics — 1 skill

What declarations and files are present in this pinned source?

Review

What we ran

What we saw

Limits