google-search-console

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill appears to be a coherent Google Search Console analysis guide; the main thing to notice is that API use would involve access to your GSC site data.

This looks safe as an instruction-only GSC analysis skill, but treat Search Console data as business-sensitive. Only provide exports or API access for the specific site and time period you want analyzed.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

If you connect or provide GSC data, the agent may be able to view search queries, page URLs, clicks, impressions, CTR, average position, and indexing information for your site.

Why it was flagged

Using the Search Console API normally requires authorized access to a Google Search Console property and exposes site performance/indexing data. This access is disclosed and central to the skill's stated purpose, with no evidence of hidden or unrelated credential use.

Skill content

When the user wants to analyze Google Search Console data, use the GSC API ... **API**: searchanalytics.query for programmatic access

Recommendation

Authorize only the relevant GSC property and data range, avoid granting unrelated Google account access, and review any exported data before sharing it further.