Security audit
GSC Connect - Google Search Console
Security checks across malware telemetry and agentic risk
Overview
This skill is a read-only Google Search Console connector that clearly discloses its third-party MCP endpoint and OAuth setup.
Install only if you are comfortable authorizing YUSIHK's remote MCP service for read-only Google Search Console access. Verify the OAuth consent screen and scopes, do not paste passwords or tokens into configuration, and revoke the OAuth grant or remove the MCP server when you no longer need it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.