google-search-console

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the official @useclawlink/cli tool from the NPM registry to facilitate the integration with Google Search Console.
  • [COMMAND_EXECUTION]: The skill relies on shell command execution via npx to interact with the ClawLink CLI for authentication, account connection, and performing Search Console actions.
  • [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting untrusted data from Google Search Console into the agent's context.
  • Ingestion points: External data is retrieved from Google through actions such as google_search_console_search_analytics_query, google_search_console_inspect_url, and google_search_console_list_sitemaps.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to treat retrieved content as data only or to ignore embedded instructions.
  • Capability inventory: The skill utilizes shell command execution via the ClawLink CLI (npx @useclawlink/cli) for all its functional capabilities.
  • Sanitization: There is no evidence of data sanitization, filtering, or validation performed on the external content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:43 PM
Security Audit — agent-trust-hub — google-search-console