google-trends

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines and documents the execution of a Node.js CLI script (scripts/search.js) to perform topic validation and trend analysis. This is the primary intended function.
  • [EXTERNAL_DOWNLOADS]: The skill requires standard dependencies (commander and google-trends-api) to be installed from the official npm registry as part of its setup process.
  • [DATA_EXFILTRATION]: The script performs network operations to communicate with Google's Trends infrastructure to retrieve search data. This is neutral behavior consistent with the skill's description.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external source (Google Trends API) which is then displayed to the agent or saved to a file. While this represents a theoretical surface for indirect prompt injection, it is managed by the agent's internal safety protocols.
  • Ingestion points: Data is ingested from the Google Trends API in the fetchRelatedQueries and fetchInterestOverTime functions in scripts/search.js.
  • Boundary markers: None identified in the script output logic.
  • Capability inventory: The skill possesses file writing capabilities via fs.writeFileSync in scripts/search.js.
  • Sanitization: Results are parsed as JSON and formatted for display without additional sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 06:45 AM
Security Audit — agent-trust-hub — google-trends