google-search-console
Fail
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's stated purpose (Google Search Console integration via Membrane, with authentication managed by Membrane) is coherent with its capabilities and data flows. Install sources are official npm registries (Membrane CLI), and credentials appear to be handled server-side by Membrane rather than exposed locally. Data access is limited to Google Search Console data through Membrane’s proxy, with appropriate user-driven action selection. Overall, the footprint is benign and proportionate to the stated purpose, with no evident credential harvesting, supply-chain concerns, or unauthorized data exfiltration pathways.
Confidence: 98%
Audit Metadata