tracking-google-serp-rankings
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Google Search results, including website titles and snippets. This constitutes an ingestion point for untrusted external data, creating a potential surface for indirect prompt injection. However, the skill acts as a reporting tool and does not perform high-risk operations (such as code execution or file writes) based on this content.
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.apify.comand triggers theapidojo~google-search-scraperactor. These references target a well-known service and a resource owned by the skill's author, which is consistent with the stated purpose of tracking SEO rankings.
Audit Metadata