Security audit

Google Search Console

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward MyBrandMetrics Google Search Console query helper, but users should avoid putting API keys directly on the command line.

Install this only if you trust MyBrandMetrics with the connected Search Console data. Use `MYBRANDMETRICS_API_KEY` instead of `--api-key`, avoid sharing terminal output that may contain secrets, rotate any key previously pasted into shell history, and install dependencies in an isolated environment.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/searchconsole.py:152
Finding: API Key Exposure Through Command-Line Arguments
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: references/configuration.md:24
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Credential Access

High

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Content: Scanner excerpt · references/configuration.md (reported line 50)May include surrounding context.
md
## Security Rules - Never commit API keys, access tokens, service account files, private keys, or OAuth credentials. - Avoid printing keys in terminal logs. - Redact credentials before sharing command output or screenshots.

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 87% confidence
Finding: The skill advertises use of bash/python, network access, and environment-based API keys, but it does not declare an explicit tool/permission scope such as allowed-tools or permissions. That creates an avoidable trust gap: a runner or reviewer cannot easily constrain what the skill is allowed to access, increasing the chance of unintended network calls or secret exposure if the script or future edits become unsafe.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · scripts/searchconsole.py (reported line 14)May include surrounding context.
python
import requests BASE_URL = "https://api.mybrandmetrics.com/explorer/query" DEFAULT_TIMEOUT = 30

Static analysis

No suspicious patterns detected.