search-analytics
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to official Google API endpoints (googleapis.com) to synchronize search performance data. This is a well-known service required for the skill's stated functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted search data (queries and page URLs) from Google Search Console.\n
- Ingestion points:
scripts/search_analytics.py(Search Console API response handling).\n - Boundary markers: Data is output directly into CLI tables and SQL views without explicit prompt isolation.\n
- Capability inventory: The skill can write to the local file system to store a SQLite database and OAuth credentials.\n
- Sanitization: The application uses parameterized SQL queries throughout
scripts/search_analytics.pyto ensure safe database interaction.\n- [DATA_EXFILTRATION]: The skill manages sensitive Google OAuth credentials, storing them in~/.config/gsc/credentials.json. This is standard behavior for CLI tools requiring persistent authorized access to Google services.
Audit Metadata