ga4-implementation

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and provides instructions for installing well-known third-party libraries and tools essential for the implementation task.
  • Fetches the @next/third-parties package from the official NPM registry for Next.js integrations.
  • References the vanilla-cookieconsent open-source library from GitHub and NPM for technical compliance.
  • References official Google (googletagmanager.com) and Microsoft (clarity.microsoft.com) tracking scripts.
  • [COMMAND_EXECUTION]: The skill provides standard command-line instructions for developers to verify their installation and manage dependencies.
  • Includes npm install commands for standard development libraries.
  • Suggests using grep to verify the presence of GTM snippets in static build outputs.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where an agent may ingest external data (GA4 reports, Search Console queries, or Microsoft Clarity session recordings) to perform diagnostics.
  • Ingestion points: Data is sourced from Google Analytics and Google Search Console APIs/reports (referenced in diagnostics-troubleshooting.md).
  • Boundary markers: Not explicitly defined in this knowledge base, as it focuses on the setup phase rather than the runtime interaction logic.
  • Capability inventory: The skill allows the agent to read and interpret conversion funnels, traffic metrics, and SEO performance data.
  • Sanitization: Standard for platform-integrated analytics tools; the risk is low as the data typically consists of structured metrics and short search queries.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:53 PM