google-search-console
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands using the
@useclawlink/clitool to interact with Google Search Console. - [CREDENTIALS_UNSAFE]: Local storage of session credentials occurs at
~/.clawlink/credentials.json, which is accessed by the CLI tool during operation. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@useclawlink/clipackage from the NPM registry. - [INDIRECT_PROMPT_INJECTION]: Processing external data such as search analytics and sitemap metadata poses a risk of indirect prompt injection.
- Ingestion points: Data retrieved through
google_search_console_search_analytics_query,google_search_console_inspect_url, and other site-related actions inSKILL.md. - Boundary markers: The instructions include a manual confirmation step ("confirm with the user before any write") for destructive actions.
- Capability inventory: The skill allows site management actions (add/delete) and sitemap submission through the vendor CLI.
- Sanitization: There is no documented validation or sanitization of the data retrieved from Google Search Console.
Audit Metadata