google-analytics
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill uses standard tools to interact with official APIs from a trusted vendor.
- [DATA_EXPOSURE]: The skill accesses the $GOOGLE_ANALYTICS_TOKEN environment variable to authenticate API requests. These requests are sent over HTTPS to official Google domains (analyticsadmin.googleapis.com and analyticsdata.googleapis.com). This behavior is consistent with the skill's intended purpose and follows secure authentication practices.
- [COMMAND_EXECUTION]: The skill uses curl for network requests and jq for JSON processing. These are standard system tools used here in a controlled manner to fetch and display analytics data.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Google Analytics reports. The risk of prompt injection is minimal as the ingested data consists of structured metrics and dimensions from a trusted source, and is processed using jq filters before being presented.
Audit Metadata