Trust Assessment
ga4-analytics received a trust score of 93/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Unpinned npm dependency version, Local Storage of Sensitive Analytics Data.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Unpinned npm dependency version Dependency '@google-analytics/data' is not pinned to an exact version ('^4.9.0'). Pin dependencies to exact versions to reduce drift and supply-chain risk. | Dependencies | skills/adamkristopher/ga4-analytics/scripts/package.json | |
| INFO | Local Storage of Sensitive Analytics Data The skill is designed to save Google Analytics 4 and Search Console report data, which can contain sensitive website traffic, user behavior, and search query information, to local JSON files. While this is an intended feature for local analysis and summarization, it means this sensitive data resides on the local filesystem in the 'results/' directory. Users should be aware that this data becomes accessible to anyone with read access to the skill's execution environment. If the environment running the skill is compromised, this data could be exposed. Ensure the execution environment for the skill is secured and that access to the 'results/' directory is restricted. Consider implementing data retention policies or encryption for locally stored sensitive data if required by compliance standards. Document this data handling practice clearly for users. | LLM | scripts/src/core/storage.ts:100 |
Scan History
Embed Code
[](https://skillshield.io/report/860d875041a8b54b)
Powered by SkillShield