ga-taxonomy
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a productivity tool for managing Google Analytics event taxonomies. It uses official Google SDKs to interact with Analytics and Sheets APIs.
- [COMMAND_EXECUTION]: The skill utilizes a set of Python scripts to perform deterministic tasks such as parsing XLSX/CSV files, diffing local taxonomy files with live GA4 data, and managing local backups. These operations are scoped to the project's local .ga4 directory.
- [EXTERNAL_DOWNLOADS]: The skill connects to well-known Google services (Sheets and Analytics APIs) to fetch user-defined taxonomy data and property metadata. It uses standard OAuth2 authentication handled via a sibling ga-auth skill.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from spreadsheets. It includes mitigation such as markdown cell escaping and structured JSON output to ensure data integrity. The ingestion of spreadsheet data is a core function of the skill and does not present a high risk of agent manipulation in this context.
Audit Metadata