ga4-measurement-plan
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes content from external websites, creating a surface for indirect prompt injection where third-party content could influence the agent's logic or the resulting measurement plan.
- Ingestion points: External site content retrieved via
WebFetchin Step 1. - Boundary markers: None defined to distinguish site content from internal instructions.
- Capability inventory: The skill has access to
WebFetch,WebSearch,Bash,Read, andWritetools. - Sanitization: No explicit sanitization or validation of the fetched content is specified before analysis.
- [EXTERNAL_DOWNLOADS]: The skill uses the
WebFetchtool to download and analyze the structure of user-specified URLs and their associated pages to identify site types and conversion funnels.
Audit Metadata