skills/zapier/connectors/google-analytics/Snyk

google-analytics

Fail

Audited by Snyk on Aug 7, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 0.80). This skill exposes Measurement Protocol secrets (listing their values) and requires a per-call apiSecret for sendEvent, which can force the LLM to accept and embed secret values verbatim in CLI/JSON invocations — an exfiltration risk.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Aug 7, 2026, 08:53 PM

Issues

1

Security Audit — snyk — google-analytics