skillhash

Is attribution safe?

Grade A, 100/100. No meaningful risk found.

When the user wants to figure out which marketing actually drives conversions and revenue, choose or interpret an attribution model, or reconcile conflicting numbers across tools. Also use when the user mentions "attribution," "attribution model," "first-touch vs last-touch," "multi-touch," "which channel drives revenue," "what's my real CAC," "my dashboards disagree," "Google/Meta says X but GA says Y," "media mix model," "MMM," "incrementality," "geo lift," "holdout test," "how did you hear about us," "self-reported attribution," "dark social," or wants to instrument attribution themselves — "stitch my bookings to their source," "SavvyCal/Calendly attribution," "close the identify gap," "track conversions on a third-party domain," "first-party / self-hosted attribution." For event tracking setup and UTMs, see analytics. For ad-platform pixels/CAPI, see ads. For pipeline and CRM revenue reporting, see revops. For the AI-search attribution blind spot, see ai-seo.

coreyhaines31/marketingskills/skills/attribution 56kChecked 3h agoContent last changed 3h ago
A

attribution

skills/attribution
100/100 · No meaningful risk foundNo security findings

When the user wants to figure out which marketing actually drives conversions and revenue, choose or interpret an attribution model, or reconcile conflicting numbers across tools. Also use when the user mentions "attribution," "attribution model," "first-touch vs last-touch," "multi-touch," "which channel drives revenue," "what's my real CAC," "my dashboards disagree," "Google/Meta says X but GA says Y," "media mix model," "MMM," "incrementality," "geo lift," "holdout test," "how did you hear about us," "self-reported attribution," "dark social," or wants to instrument attribution themselves — "stitch my bookings to their source," "SavvyCal/Calendly attribution," "close the identify gap," "track conversions on a third-party domain," "first-party / self-hosted attribution." For event tracking setup and UTMs, see analytics. For ad-platform pixels/CAPI, see ads. For pipeline and CRM revenue reporting, see revops. For the AI-search attribution blind spot, see ai-seo.

Content hash
sha256:a0525238153a32740d37f8f746eaf5f111110d06389966958176126426eda812
Files
6
Quality
100/100

Security findings

None of the 30 rules matched.

Files in this skill
  • SKILL.md22.9 KB
  • evals/evals.json12.9 KB
  • references/attribution-models.md6.6 KB
  • references/by-business-type.md7.7 KB
  • references/first-party-tracking.md19.4 KB
  • references/measurement-paradigms.md10.3 KB

Questions about attribution

Is attribution safe to install?
Our scanner gave attribution grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install attribution in Claude Code or Codex?
Run skillhash add github:coreyhaines31/marketingskills/skills/attribution. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if attribution changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from coreyhaines31/marketingskills