gsc-index-triage
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill performs its stated SEO triage and reporting functions using standard methods.
- [EXTERNAL_DOWNLOADS]: The skill communicates with well-known Google API endpoints for URL inspection and search analytics. It also downloads XML sitemaps from remote URLs provided by the user or identified via the Search Console property. These operations are essential to the skill's primary purpose and target trusted or user-defined infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from sitemaps and API responses. 1. Ingestion points: XML data from sitemaps and JSON responses from Google Search Console APIs. 2. Boundary markers: Findings are output as structured text and JSON reports for the agent to interpret. 3. Capability inventory: Performs network requests to Google and sitemap URLs; reads and writes state information in the local file system at ~/.local/state/gsc-triage/. 4. Sanitization: Uses standard Python libraries for XML and JSON parsing.
Audit Metadata