google-analytics

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate data connector for Google Analytics 4. No malicious patterns, obfuscation, or safety-bypass attempts were detected.
  • [COMMAND_EXECUTION]: The entry-point script cli.js utilizes spawnSync to manage the execution of the connector's logic (either TypeScript source or compiled JavaScript) based on the local Node.js version and environment.
  • [EXTERNAL_DOWNLOADS]: The skill documentation and package.json reference standard Node.js dependencies from the official NPM registry, including @zapier/connectors-sdk and zod.
  • [SAFE]: All network operations are directed to well-known Google API domains (analyticsdata.googleapis.com, analyticsadmin.googleapis.com, and www.google-analytics.com) for valid analytics and administrative operations.
  • [SAFE]: The skill processes external analytics data but employs strict Zod-based output validation to ensure data integrity and mitigate potential risks from untrusted content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 08:53 PM
Security Audit — agent-trust-hub — google-analytics