Google Analytics
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is a coherent Google Analytics integration, but users should notice that it relies on a third-party Membrane CLI, OAuth access, and account-changing actions.
This skill appears purpose-aligned for Google Analytics. Before installing, make sure you trust Membrane, review the OAuth permissions, install the CLI from the official source, and require confirmation before any action that creates or changes Analytics resources.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The connected Membrane account may be able to access or act on the user's Google Analytics resources according to the OAuth permissions granted.
The skill delegates Google Analytics authentication and token refresh to Membrane. This is expected for the integration, but it gives the connected service ongoing access to the user's Google Analytics account.
Membrane handles authentication and credentials refresh automatically
Connect only the intended Google account, review OAuth scopes during login, and revoke the connection when it is no longer needed.
If used without care, the agent could create or modify Google Analytics resources that affect reporting and business workflows.
The action catalog includes mutating Google Analytics configuration actions. These are aligned with 'Manage Accounts,' but they can change analytics account setup.
| Create Property | create-property | Creates a new Google Analytics GA4 property ... | Create Web Data Stream | create-web-data-stream | Creates a new web DataStream on a property.
Use read-only actions when possible, and require clear user confirmation before creating, updating, or deleting Google Analytics resources.
The behavior of the installed CLI may change over time as new package versions are published.
The skill instructs installation of a global npm CLI using the latest available version. This is central to the integration, but it is not pinned to a reviewed version.
npm install -g @membranehq/cli@latest
Install the CLI from the official package source and consider pinning a known version in managed environments.
Google Analytics account metadata, action inputs, and responses may be processed through Membrane as part of normal operation.
The integration routes Google Analytics activity through the Membrane CLI/service rather than only direct local calls. This is disclosed and purpose-aligned, but users should understand the third-party data path.
This skill uses the Membrane CLI to interact with Google Analytics.
Review Membrane's data handling policies and avoid connecting accounts or properties that should not be accessible through a third-party integration layer.