ga4
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates exclusively with official Google API endpoints (accounts.google.com, oauth2.googleapis.com, and analyticsdata.googleapis.com) for authentication and data retrieval.
- [SAFE]: Credentials and sensitive configuration (GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, GOOGLE_REFRESH_TOKEN) are managed via environment variables, which is the recommended practice for securing secrets.
- [SAFE]: The skill relies on standard, well-maintained libraries from Google (google-analytics-data, google-auth-oauthlib) and the Python community (requests).
- [SAFE]: No patterns of obfuscation, command injection, or unauthorized data exfiltration were detected. The setup script (ga4_auth.py) is a transparent utility for the initial OAuth flow.
Audit Metadata