rank-monitor
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure practices by explicitly instructing the agent to verify the existence of the
mcp-mozpackage vianpm viewbefore attempting any usage, noting thatnpxcan execute remote code. - [SAFE]: Data access is scoped to specific configuration and data directories (e.g.,
~/.claude-marketing/and${CLAUDE_PLUGIN_DATA}), following the principle of least privilege for file system operations. - [SAFE]: The skill clearly distinguishes between its capabilities and external data sources (GSC, Rank-trackers), preventing the agent from making false claims about data it cannot verify, such as AI Overview citation exports from GSC.
Audit Metadata