gtm-setup

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the googleapis package from the official npm registry, which is a well-known and trusted source.
  • [COMMAND_EXECUTION]: Includes a script to automate the installation of dependencies using the system's package manager to ensure the environment is correctly configured.
  • [CREDENTIALS_UNSAFE]: Manages OAuth 2.0 credentials and tokens by saving them to local files. The skill correctly identifies these as sensitive and advises the user to add them to their .gitignore file to prevent accidental exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 12:01 PM