gtm-setup

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automates the installation of the official googleapis package from the public npm registry to interact with the Google Tag Manager API.
  • [COMMAND_EXECUTION]: The script scripts/install-googleapis.js executes npm install googleapis --save via child_process.execSync to install the required dependency.
  • [SAFE]: The skill follows security best practices by explicitly instructing the user to add the generated OAuth tokens (gtm-token.json) to .gitignore to prevent accidental exposure in source control.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:42 AM