The Agent Skills Directory

[SAFE]: The skill exclusively communicates with official Google API domains (analyticsadmin.googleapis.com, analyticsdata.googleapis.com, and www.google-analytics.com) to perform its functions.- [SAFE]: Authentication is implemented using standard OAuth 2.0 bearer tokens or Zapier-managed connections. The documentation explicitly advises users to manage secrets via environment variables or secure stores rather than hardcoding them.- [SAFE]: The tool provides granular access to GA4 features, clearly documenting the required OAuth scopes (readonly vs. edit) for each operation.- [SAFE]: The Measurement Protocol implementation (sendEvent) includes appropriate warnings about the lack of server-side validation for certain parameters, encouraging the use of the debug endpoint for verification.- [SAFE]: No evidence of prompt injection, data exfiltration to unauthorized third parties, obfuscation, or malicious persistence mechanisms was found in the skill's instructions or source code.

google-analytics