data-extraction-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns to ingest data from GA4, GSC, and SE Ranking, which frequently contains external, potentially untrusted strings such as page titles and search queries.\n
- Ingestion points: Tools
google-analytics.get_report,google-search-console.search_analytics, andseo-data-api-mcpreferenced inSKILL.md.\n - Boundary markers: No delimiters or boundary markers are defined to separate ingested data from agent instructions.\n
- Capability inventory: Skill patterns include subprocess execution (bash), network requests (curl), and file system writes (/tmp) as part of the retry and caching logic documented in
SKILL.md.\n - Sanitization: No sanitization or content validation is included in the processing patterns.\n- [EXTERNAL_DOWNLOADS]: The skill references and recommends the installation of external tools and code, specifically
npx claudeupand cloning theseranking/seo-data-api-mcp-serverrepository from GitHub.\n- [COMMAND_EXECUTION]: The documentation provides shell script templates for implementing API retries and local caching usingcurland file operations in the agent's local environment.
Audit Metadata