The Agent Skills Directory

[SAFE]: The skill interacts exclusively with official Google Analytics 4 API endpoints using the supported google-analytics-data client library. There are no signs of unauthorized network activity or data exfiltration to non-whitelisted domains.
[SAFE]: Credential management is performed using OAuth2 tokens stored in a local .ga4/token.json file. The scripts include secure handling of these tokens, including automated refreshing and validation of required scopes (analytics.readonly).
[SAFE]: The skill implements extensive input validation and sanitization through the ga4_reporting.py module. This includes checks for camelCase vs. snake_case keys, type enforcement for JSON parameters, and range validation for dates and offsets, which effectively prevents malformed requests from reaching the API.
[SAFE]: No dangerous dynamic execution patterns such as eval(), exec(), or unsafe deserialization were identified. Data processing is handled through standard JSON parsing and structured API objects.
[SAFE]: The instructions and code include sophisticated defensive mechanisms to warn the agent about common GA4 data pitfalls, such as data sampling, privacy thresholding, and the non-additive nature of certain metrics (e.g., active users), ensuring the generated insights are reliable and safe for business use.
[SAFE]: The skill relies on legitimate dependencies specified in requirements.txt (google-analytics-data, pytest) and operates within a standard virtual environment, avoiding suspicious remote code execution or installation patterns.

ga-use