google-search-console

• Outcome: Pass
• Latest audit: May 29, 2026, 8:22 PM
• Version:
  1.5.0

Overview

This is a disclosed Google Search Console guidance skill with a somewhat broad trigger, but no hidden execution, persistence, or unsafe behavior in the artifact.

Install this if you want the agent to help interpret Google Search Console data. Be mindful that it may activate for adjacent search-performance questions, and review any recommendations before taking account-impacting actions such as submitting a disavow file or requesting indexing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The invocation description is broad enough to trigger on many generic requests involving analysis or interpretation of search-related data, which can cause the agent to select this skill when the user did not specifically ask for Google Search Console help. Over-broad activation increases the chance of incorrect tool routing, unnecessary exposure of connected GSC capabilities, and responses anchored to the wrong domain context.

VirusTotal

65/65 vendors flagged this skill as clean.