Security audit
Security checks for vulnerabilities and agentic risk
This skill describes a future integration and offers an optional waitlist signup that requires your explicit permission.
Install expecting informational previews, not working Search Console tools. Joining the waitlist shares your confirmed email, role, and any optional link or message with Agiexa. Future OAuth and security claims are descriptions, not verified implementations; the publisher website could not be independently inspected.
The code's sole operation is an HTTP POST to https://agiexa.com/api/agent/waitlist. This is a registration or lead-collection action, materially different from the declared search-performance and indexing functionality. Although it uses the named provider, the submitted waitlist information and asserted consent are not supporting implementation details for any Search Console operation shown.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
openclaw:
requires:
bins:
- curl
homepage: https://agiexa.com/integrations/google-search-console
---
The manifest at L003 presents nine Google Search Console tools for viewing search queries, rankings, and indexing problems. However, L070 instructs the agent not to perform those tasks because the service has not launched, and the executable workflow at L090–L100 instead posts user contact details to a marketing waitlist. Explicit consent limits the privacy risk, but does not resolve the mismatch between the advertised functionality and the actual workflow.