add-google-analytics
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local CLI tools such as
gcloud,git, andvercelto manage infrastructure and repository state. These operations are limited to the skill's documented purpose and are gated behind mandatory user confirmation prompts for any state-changing actions. - [EXTERNAL_DOWNLOADS]: The scripts interact with official Google API endpoints (
analyticsadmin.googleapis.comandiamcredentials.googleapis.com) to provision Analytics resources. These are well-known technology services and are used for legitimate resource management. - [DATA_EXFILTRATION]: No unauthorized data exfiltration was detected. The skill specifically handles public metadata like Measurement IDs and uses standard Google Cloud impersonation to obtain temporary access tokens without storing sensitive long-lived credentials.
- [SAFE]: The skill adheres to security best practices by implementing a 'keyless' service account model, requiring a clean Git worktree for application, and performing extensive dry-run inspections before modifying any application source code.
Audit Metadata