google-search-console

BENIGN with medium supply-chain risk. The skill’s purpose and capabilities align with SEO reporting, and credentials/data flow to official Google services are conceptually appropriate. Main concern is install trust: it instructs users to run an unpinned community npm MCP server via npx and hand it Google service-account credentials, which is proportionate to the task but still a meaningful third-party trust boundary.