The Agent Skills Directory

[SAFE]: The skill relies on the official @google-analytics/data package from Google, a well-known and trusted service. All network communication is directed to Google's official API endpoints for data retrieval.
[SAFE]: Sensitive configuration, such as the Google Analytics Property ID and the path to the service account credentials, is handled via environment variables or .env files. The documentation correctly instructs users to store these outside of version control, following secure secret management practices.
[SAFE]: The skill scripts (analyze.ts, daily-report.ts, ga-client.ts) are focused on data retrieval and analytical processing. They provide structured reporting and prioritized recommendations without implementing dangerous persistence, privilege escalation, or arbitrary command execution.
[SAFE]: While the skill processes external data like website page titles and paths (which constitutes an indirect prompt injection surface), this behavior is essential to its primary intended purpose. The data is processed for reporting purposes and numeric analysis, presenting no significant risk.

google-analytics