ga4-setup
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard development and configuration tasks for analytics integration using legitimate services and secure environment variable management practices.- [EXTERNAL_DOWNLOADS]: Configures the application to fetch the
gtag.jslibrary from Google's official Tag Manager domain (googletagmanager.com), which is a well-known and trusted service.- [DATA_EXFILTRATION]: Transmits event data and administrative provisioning requests to official Google endpoints (google-analytics.comandgoogleapis.com). These network operations are consistent with the skill's primary purpose and target well-known services.- [COMMAND_EXECUTION]: Uses theBashtool to install theserver-onlypackage viapnpm, which is a standard procedure for ensuring server-side logic in Next.js environments.- [PROMPT_INJECTION]: Employs$ARGUMENTSto allow the agent to select between different setup modes (free vs scale). This is a standard input pattern and does not attempt to bypass safety guidelines.
Audit Metadata