ga-auth
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The status check script (
scripts/ga4_status.py) performs a dependency probe by executing a dynamically constructed Python script viasubprocess.run. This probe is used exclusively to verify that required libraries are present in the virtual environment and uses a hardcoded logic template.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes account and property information retrieved from the Google Analytics Admin API, which is then presented to the user and stored in local configuration files.\n - Ingestion points: The
list-propertiesandget-propertycommands inscripts/ga4_admin.pyfetch external data from the Google Analytics 4 API.\n - Boundary markers: Instructions in
SKILL.mddirect the agent to format and present the retrieved lists to the user for interactive selection.\n - Capability inventory: The skill manages local project configuration in
.ga4/config.jsonand session tokens in.ga4/token.json.\n - Sanitization: Input validation is performed in
scripts/ga4_auth.pyusing regular expressions to verify property IDs before they are persisted.
Audit Metadata