search-console-insights
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell scripts (
track.sh,schedule_tracking.sh) that execute Python scripts and manage system schedulers (macOS launchd). These are used for the intended purpose of automating weekly ranking reports and require explicit user opt-in during onboarding. - [EXTERNAL_DOWNLOADS]: The skill downloads standard SEO and Google API libraries (
google-api-python-client,google-auth-oauthlib,requests) via arequirements.txtfile. These are well-known, versioned packages from the official PyPI registry. - [CREDENTIALS_SAFE]: While the skill handles OAuth tokens and API keys, it follows security best practices by storing them in local configuration directories (
~/.config/gsc-insights/) and using.envfiles for keys. It does not hardcode secrets or exfiltrate them to unauthorized third parties.
Audit Metadata