ga4-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides instructions for installing well-known third-party libraries and tools essential for the implementation task.
- Fetches the
@next/third-partiespackage from the official NPM registry for Next.js integrations. - References the
vanilla-cookieconsentopen-source library from GitHub and NPM for technical compliance. - References official Google (
googletagmanager.com) and Microsoft (clarity.microsoft.com) tracking scripts. - [COMMAND_EXECUTION]: The skill provides standard command-line instructions for developers to verify their installation and manage dependencies.
- Includes
npm installcommands for standard development libraries. - Suggests using
grepto verify the presence of GTM snippets in static build outputs. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where an agent may ingest external data (GA4 reports, Search Console queries, or Microsoft Clarity session recordings) to perform diagnostics.
- Ingestion points: Data is sourced from Google Analytics and Google Search Console APIs/reports (referenced in
diagnostics-troubleshooting.md). - Boundary markers: Not explicitly defined in this knowledge base, as it focuses on the setup phase rather than the runtime interaction logic.
- Capability inventory: The skill allows the agent to read and interpret conversion funnels, traffic metrics, and SEO performance data.
- Sanitization: Standard for platform-integrated analytics tools; the risk is low as the data typically consists of structured metrics and short search queries.
Audit Metadata