Google Search Console Analytics
Security checks across malware telemetry and agentic risk
Overview
This skill has a plausible Search Console purpose, but it directs the agent to run a missing local executable with Google credentials and broad automatic invocation.
Review before installing. Only use this if you trust and can inspect the local /root/.openclaw/skills/gsc-search/gsc-search executable, and use a least-privilege Google credential limited to the intended Search Console property. Avoid always-on routing for broad SEO questions unless every user of the agent is authorized to see akku-alle.de analytics.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.