gsc-cli
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill implements a functional CLI wrapper for official Google Search Console APIs.
- [SAFE]: Secure credential management. The implementation stores OAuth tokens in a dedicated configuration file (
~/.config/gsc-cli/config.json) using restricted file permissions (0o600), ensuring that sensitive data is accessible only by the current user. - [SAFE]: Information disclosure protection. The CLI includes a
redact_configfunction that explicitly masks sensitive values likeaccess_tokenandrefresh_tokenwhen displaying configuration status to the user. - [SAFE]: Trusted network communication. All network operations are directed towards well-known and official Google domains (
accounts.google.comandgoogleapis.com) for authentication and data retrieval. - [SAFE]: Minimal dependency footprint. The skill relies entirely on standard Python libraries for networking and JSON processing, avoiding risks associated with unverifiable third-party packages.
Audit Metadata