google-analytics
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Authentication is handled via the official Google OAuth 2.0 Desktop flow. Sensitive user credentials and configuration settings are stored locally in the user's home directory (~/.config/skills/ga4/), isolated from the skill's source files.
- [SAFE]: The skill interacts exclusively with documented Google Analytics endpoints for reporting, administration, and event ingestion. All network communication is directed to trusted Google domains.
- [SAFE]: All destructive actions, such as deleting GA4 properties or user data, are protected by mandatory CLI flags and specific instructions requiring the AI agent to obtain human confirmation before proceeding.
- [SAFE]: Dependencies are restricted to verified libraries from the Google Cloud and Python ecosystems, such as google-analytics-admin and google-auth, with no evidence of unverified or malicious packages.
Audit Metadata