How to install a vetted skill instead of a random GitHub repo
When to use: Your org requires reviewed dependencies and you want skills without going through procurement each time.
Flow
-
Browse catalogList marketplace skills for GA4/analytics use cases.✓ Copied→ Catalog subset with audit status + permissions
-
Inspect permissionsShow me what permissions the 'ga4-setup' skill requests and what it sends externally.✓ Copied→ Explicit permission + egress disclosure
Outcome: A reviewed skill installed without audit overhead.
Pitfalls
- Audit status ages with updates — Check manifest timestamp; re-review if >90 days since last audit