GrowthNav

The project demonstrates a strong security posture for common data platform risks: QueryValidator explicitly blocks destructive SQL operations (DROP, DELETE, TRUNCATE, UPDATE, INSERT, MERGE) unless `allow_writes` is explicitly set to true, preventing SQL injection. GCP credentials are managed via Secret Manager, and `google_ads_customer_ids`, `meta_ad_account_ids` are validated. However, the `LLMSchemaMapper` sends 'sample_rows' (sample data) to an external LLM (Claude) for schema discovery, which could pose a data exfiltration risk if sensitive PII is present in the sample data and not appropriately masked or anonymized before being sent to the LLM. Domain-wide delegation for Google Workspace APIs is used, which requires careful setup and permission management.