Skip to main content

mixpanel

Enables product analytics with Mixpanel for tracking user behavior, funnels, retention, and A/B testing in web and mobile apps.

Install this skill

or
91/100

Security score

The mixpanel skill was audited on May 13, 2026 and we found 9 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 101

Webhook reference - potential data exfiltration

SourceSKILL.md
101// Use for backend events like payments, API calls, and webhook handlers.
low line 35

Access to .env file

SourceSKILL.md
35mixpanel.init(process.env.NEXT_PUBLIC_MIXPANEL_TOKEN!, {
low line 36

Access to .env file

SourceSKILL.md
36debug: process.env.NODE_ENV === 'development',
low line 104

Access to .env file

SourceSKILL.md
104const mixpanel = Mixpanel.init(process.env.MIXPANEL_TOKEN!, {
low line 183

Base64 decode operation

SourceSKILL.md
183encoded = base64.b64encode(json.dumps([data]).encode()).decode()
low line 189

Base64 decode operation

SourceSKILL.md
189'Authorization': 'Basic ' + base64.b64encode(b'your_api_secret:').decode(),
low line 185

External URL reference

SourceSKILL.md
185'https://api.mixpanel.com/import',
low line 235

External URL reference

SourceSKILL.md
235f'https://mixpanel.com/api/2.0/insights',
low line 255

External URL reference

SourceSKILL.md
255'https://data.mixpanel.com/api/2.0/export',
Scanned on May 13, 2026
View Security Dashboard