ga4-monitor
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources and its own historical snapshots, creating a theoretical injection surface.
- Ingestion points: Metric data and event names fetched via
tool_run_reportandtool_run_realtime_report, as well as previous snapshots retrieved throughread_context_node. - Boundary markers: None explicitly defined for the interpolation of GA4 metrics into the output summaries.
- Capability inventory: Accesses GA4 reporting tools, reads and writes to internal context nodes, and logs issues via
create_finding. - Sanitization: No specific sanitization or validation logic is applied to the ingested metric strings or event names before reporting.
Audit Metadata