search-demand-reader
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local Node.js script to process data. Analysis of
resources/search-demand.jsconfirms that it contains no network calls, file system modifications, or dynamic code execution (such as eval or Function constructors). It only reads its own file content to display help documentation. - [REMOTE_CODE_EXECUTION]: No remote code execution or external dependency installations were detected. The script is self-contained and explicitly states it has no dependencies.
- [DATA_EXFILTRATION]: No network activity was detected. The script processes data provided via the command line and returns the results to the standard output.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (Google Search Console exports), it lacks the capabilities (like file writing or network access) that would allow an attacker to exploit an injection. The data processed consists of SEO keywords and metrics which are handled as plain strings.
Audit Metadata