skills/ogaeng/ga4-skill/ga-auth/Gen Agent Trust Hub

ga-auth

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The status check script (scripts/ga4_status.py) performs a dependency probe by executing a dynamically constructed Python script via subprocess.run. This probe is used exclusively to verify that required libraries are present in the virtual environment and uses a hardcoded logic template.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes account and property information retrieved from the Google Analytics Admin API, which is then presented to the user and stored in local configuration files.\n
  • Ingestion points: The list-properties and get-property commands in scripts/ga4_admin.py fetch external data from the Google Analytics 4 API.\n
  • Boundary markers: Instructions in SKILL.md direct the agent to format and present the retrieved lists to the user for interactive selection.\n
  • Capability inventory: The skill manages local project configuration in .ga4/config.json and session tokens in .ga4/token.json.\n
  • Sanitization: Input validation is performed in scripts/ga4_auth.py using regular expressions to verify property IDs before they are persisted.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 07:47 AM