add-google-analytics

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local CLI tools such as gcloud, git, and vercel to manage infrastructure and repository state. These operations are limited to the skill's documented purpose and are gated behind mandatory user confirmation prompts for any state-changing actions.
  • [EXTERNAL_DOWNLOADS]: The scripts interact with official Google API endpoints (analyticsadmin.googleapis.com and iamcredentials.googleapis.com) to provision Analytics resources. These are well-known technology services and are used for legitimate resource management.
  • [DATA_EXFILTRATION]: No unauthorized data exfiltration was detected. The skill specifically handles public metadata like Measurement IDs and uses standard Google Cloud impersonation to obtain temporary access tokens without storing sensitive long-lived credentials.
  • [SAFE]: The skill adheres to security best practices by implementing a 'keyless' service account model, requiring a clean Git worktree for application, and performing extensive dry-run inspections before modifying any application source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 04:45 AM
Security Audit — agent-trust-hub — add-google-analytics