data-extraction-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides patterns to ingest data from GA4, GSC, and SE Ranking, which frequently contains external, potentially untrusted strings such as page titles and search queries.\n
  • Ingestion points: Tools google-analytics.get_report, google-search-console.search_analytics, and seo-data-api-mcp referenced in SKILL.md.\n
  • Boundary markers: No delimiters or boundary markers are defined to separate ingested data from agent instructions.\n
  • Capability inventory: Skill patterns include subprocess execution (bash), network requests (curl), and file system writes (/tmp) as part of the retry and caching logic documented in SKILL.md.\n
  • Sanitization: No sanitization or content validation is included in the processing patterns.\n- [EXTERNAL_DOWNLOADS]: The skill references and recommends the installation of external tools and code, specifically npx claudeup and cloning the seranking/seo-data-api-mcp-server repository from GitHub.\n- [COMMAND_EXECUTION]: The documentation provides shell script templates for implementing API retries and local caching using curl and file operations in the agent's local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 08:19 PM
Security Audit — agent-trust-hub — data-extraction-patterns