google-analytics-automation

SUSPICIOUS. The skill’s functionality matches its Google Analytics purpose, but it relies on a third-party remote MCP gateway that handles OAuth and data brokering instead of direct Google API access. Same-org evidence suggests this is not outright malicious, yet the intermediary credential/data path, overstated auth claim, and uncertainty around Rube service status make the trust model medium risk.