looker-studio
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires standard Python libraries such as
gspread,google-auth, andrequestsfrom official registries to facilitate API connectivity. - [COMMAND_EXECUTION]: Provides shell commands to run a local Python script (
scripts/data_pipeline.py) that exports data from marketing platforms to Google Sheets. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The
scripts/data_pipeline.pyscript retrieves data from Klaviyo, Shopify, and Google Analytics 4 APIs. - Boundary markers: None; the skill processes structured JSON data from authenticated API endpoints.
- Capability inventory: The skill uses the Google Sheets API to write marketing metrics into user-controlled spreadsheets.
- Sanitization: Employs standard JSON parsing of responses from official service providers.
Audit Metadata