ga4-setup

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs standard development and configuration tasks for analytics integration using legitimate services and secure environment variable management practices.- [EXTERNAL_DOWNLOADS]: Configures the application to fetch the gtag.js library from Google's official Tag Manager domain (googletagmanager.com), which is a well-known and trusted service.- [DATA_EXFILTRATION]: Transmits event data and administrative provisioning requests to official Google endpoints (google-analytics.com and googleapis.com). These network operations are consistent with the skill's primary purpose and target well-known services.- [COMMAND_EXECUTION]: Uses the Bash tool to install the server-only package via pnpm, which is a standard procedure for ensuring server-side logic in Next.js environments.- [PROMPT_INJECTION]: Employs $ARGUMENTS to allow the agent to select between different setup modes (free vs scale). This is a standard input pattern and does not attempt to bypass safety guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 10:01 AM
Security Audit — agent-trust-hub — ga4-setup