Google Search Console

• Analyzed: May 11, 2026, 5:46 AM
• Findings: 1
• Version: 1.0.4
• Hash: d68d735291f923c38b937460debcc31c17be0fa259876157f783f7155d8b670b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill requires the installation of a global NPM package (@membranehq/cli) and routes all Google Search Console API traffic through a third-party proxy service (getmembrane.com). While these capabilities are plausibly needed for the stated integration method, they involve high-risk behaviors such as global shell execution and third-party credential/data handling. Additionally, SKILL.md contains instructions that explicitly direct the AI agent to prioritize the Membrane platform over direct API calls, which functions as a form of behavioral steering toward a specific third-party dependency.