data-manager-api-event-ingestion

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [Dependency Management]: The skill instructs users to install client libraries and utility tools from official sources, including public registries like PyPI and npm, as well as Google's official GitHub repositories under the googleads organization. This is standard procedure for utilizing proprietary Google APIs.
  • [Authentication Best Practices]: Security is maintained by recommending the use of Application Default Credentials (ADC) via the gcloud CLI. This approach avoids hardcoded secrets or long-lived keys in the codebase, following the principle of least privilege through IAM role management.
  • [Data Privacy and Sanitization]: A significant portion of the skill is dedicated to ensuring user privacy. It mandates the use of a utility library to correctly format and hash PII (email, phone numbers) before ingestion, which is a key security feature to protect sensitive data.
  • [System Command Execution]: The skill involves standard system commands for environment setup, such as package installation (pip, npm, composer) and authentication (gcloud). These commands are scoped to the intended setup of the Data Manager API and use reputable package managers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 06:28 AM
Security Audit — agent-trust-hub — data-manager-api-event-ingestion