← 返回 Skills 市场

Google Analytics 4 Analytics

Name: Google Analytics 4 Analytics
Author: akkualle

作者 Akkualle · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

112

总下载

当前安装

版本数

在 OpenClaw 中安装

/install akkualle-ga4-analytics

功能描述

Ruft Google Analytics 4 Daten für akku-alle.de ab - Seitenaufrufe, Nutzer, Sessions, Top-Seiten und Traffic-Quellen. Nutze das shell Tool um /root/.openclaw/...

使用说明 (SKILL.md)

GA4 Analytics Skill

Ruft Google Analytics 4 Daten für akku-alle.de ab.

Aufruf via Shell Tool

WICHTIG: Rufe dieses Skill mit dem shell Tool auf:

/root/.openclaw/skills/ga4-analytics/ga4-analytics

Für nur Top-Seiten:

/root/.openclaw/skills/ga4-analytics/ga4-analytics "top seiten"

Beispiel-Ausgabe

## 📊 Traffic-Übersicht (7 Tage)
- **Sessions:** 41
- **Nutzer:** 23
- **Pageviews:** 126
- **Bounce Rate:** 31.7%

## 📄 Top Seiten
| Seite | Views | Users |
|-------|-------|-------|
| / | 65 | 7 |
| /ratgeber/e-scooter-versicherung | 24 | 6 |

Wann verwenden

Nutze dieses Skill wenn der User fragt:

"Zeige mir die GA4 Statistiken"
"Wie viele Besucher hat akku-alle.de?"
"Welche Seiten werden am meisten besucht?"
"Analytics Daten"

安全使用建议

Do not install or enable this skill yet. Ask the publisher to provide: (1) the executable source or an explicit install spec (with audit-able URL or package) and a checksum, (2) remove or justify the always:true flag, and (3) documentation showing the minimal IAM permissions required by the service account referenced by GOOGLE_APPLICATION_CREDENTIALS. If you must proceed, ensure the service account is scoped to only read the specific GA4 property, verify the binary's provenance and checksum, and avoid granting broad credentials or running unvetted executables from /root paths.

功能分析

Type: OpenClaw Skill Name: akkualle-ga4-analytics Version: 1.0.0 The skill bundle provides instructions for an AI agent to interface with a Google Analytics 4 reporting tool for the domain akku-alle.de. It utilizes a local binary via the shell tool and requires standard environment variables (GOOGLE_APPLICATION_CREDENTIALS). No evidence of malicious intent, data exfiltration, or unauthorized command execution was found in the SKILL.md or _meta.json files.

能力评估

ℹ Purpose & Capability

The declared GA4 environment variables (GOOGLE_APPLICATION_CREDENTIALS, GA4_PROPERTY_ID) are appropriate for a Google Analytics 4 integration. However, the SKILL.md directs running a binary located at /root/.openclaw/skills/ga4-analytics/ga4-analytics even though the skill bundle contains no code or install spec to place such a binary there — that mismatch is disproportionate to the stated simple analytics purpose.

⚠ Instruction Scope

The instructions require using the shell tool to execute a specific local binary path. Because no binary or install steps are included, the agent would attempt to run an external artifact that isn't present in the bundle (or might be planted later). Running an arbitrary binary from /root/.openclaw/... grants it the ability to perform any local actions, which exceeds the narrow analytics task described.

⚠ Install Mechanism

There is no install spec and no code files; yet the SKILL.md prescribes executing a binary under the skill directory. Lack of an install mechanism to fetch or verify that binary is a red flag — the skill doesn't explain where the executable comes from or how it is vetted.

ℹ Credentials

Requesting GOOGLE_APPLICATION_CREDENTIALS and GA4_PROPERTY_ID is reasonable for GA4 access. That said, the credentials (service account key referenced by GOOGLE_APPLICATION_CREDENTIALS) are sensitive and should be scoped to minimal permissions. The registry metadata summary earlier reported no required env vars, creating an inconsistency with the SKILL.md.

⚠ Persistence & Privilege

SKILL.md metadata sets always:true (force-inclusion) which would give the skill permanent presence; the registry flags provided with the skill summary show always:false. The presence of always:true combined with executing a local binary (and no code provenance) raises the blast radius if the binary is malicious or replaced later.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install akkualle-ga4-analytics
安装完成后，直接呼叫该 Skill 的名称或使用 /akkualle-ga4-analytics 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

GA4 data extraction - sessions, users, pageviews, traffic sources

元数据

Slug akkualle-ga4-analytics

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题