reporting-automation
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a tutorial/template for marketing automation. While it contains Python code snippets that interact with external APIs (Google BigQuery, GA4 Data API, Gmail SMTP), these are illustrative examples for the user to implement themselves.
- [DATA_EXFILTRATION]: The code samples include network operations (SMTP and Google Cloud APIs), but they target legitimate service endpoints and the skill does not contain any instructions or code that silently exfiltrates sensitive user files.
- [CREDENTIALS_UNSAFE]: The skill uses placeholders such as 'SUA_SENHA_APP' and 'path/to/your/key.json'. It correctly advises users to use Service Accounts and environment-specific keys rather than hardcoding actual credentials.
Audit Metadata