email-campaign-attribution
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for building a data attribution pipeline and does not include any executable binary or suspicious scripts.
- [SAFE]: Data handling instructions specifically emphasize best practices for secret management, instructing the user to read credentials like
api_secretfrom environment variables rather than hardcoding them. - [SAFE]: The skill explicitly advises against sending personally identifiable information (PII) such as names or email addresses to external platforms (GA4), recommending the use of opaque identifiers instead.
- [SAFE]: The provided SQL reference (
references/attribution.sql) uses standard DuckDB/PostgreSQL syntax for joining structured tables and does not exhibit any patterns of SQL injection or dynamic command construction.
Audit Metadata