google-trends
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill defines and documents the execution of a Node.js CLI script (
scripts/search.js) to perform topic validation and trend analysis. This is the primary intended function. - [EXTERNAL_DOWNLOADS]: The skill requires standard dependencies (
commanderandgoogle-trends-api) to be installed from the official npm registry as part of its setup process. - [DATA_EXFILTRATION]: The script performs network operations to communicate with Google's Trends infrastructure to retrieve search data. This is neutral behavior consistent with the skill's description.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external source (Google Trends API) which is then displayed to the agent or saved to a file. While this represents a theoretical surface for indirect prompt injection, it is managed by the agent's internal safety protocols.
- Ingestion points: Data is ingested from the Google Trends API in the
fetchRelatedQueriesandfetchInterestOverTimefunctions inscripts/search.js. - Boundary markers: None identified in the script output logic.
- Capability inventory: The skill possesses file writing capabilities via
fs.writeFileSyncinscripts/search.js. - Sanitization: Results are parsed as JSON and formatted for display without additional sanitization.
Audit Metadata