google-analytics-data-api-basics
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- Official Tooling and Authentication: The skill correctly utilizes the
gcloudCLI for project configuration andapplication-default loginfor authentication. These are industry-standard practices for Google Cloud development and do not involve hardcoded credentials or unsafe secret handling. - Trusted Dependencies: The installation instructions for Python, Node.js, Java, .NET, Go, PHP, and Ruby all target official Google-maintained packages from authoritative registries (e.g., PyPI, npm, Maven Central). These packages are consistent with the vendor's own ecosystem.
- Safe Documentation and References: All external URLs in the skill and its reference files point to legitimate developer documentation at
developers.google.comor official GitHub repositories under thegoogleapisorganization. No obfuscated URLs or suspicious redirection patterns were detected. - Indirect Prompt Injection Surface: Like most data-processing skills, this skill ingests data from an external source (the Google Analytics API). While this represents a theoretical entry point for indirect instructions, the provided code examples only print the data and do not use it to construct further commands or perform dangerous operations.
Audit Metadata