← 返回 Skills 市场

Google Search Console Analytics

Name: Google Search Console Analytics
Author: akkualle

作者 Akkualle · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

106

总下载

当前安装

版本数

在 OpenClaw 中安装

/install akkualle-gsc-analytics

功能描述

Ruft Google Search Console Daten für akku-alle.de ab - Klicks, Impressionen, CTR, Rankings und Top-Keywords. Nutze das shell Tool um /root/.openclaw/skills/g...

使用说明 (SKILL.md)

Google Search Console Skill

Ruft Search Console Daten für akku-alle.de ab.

Aufruf via Shell Tool

WICHTIG: Rufe dieses Skill mit dem shell Tool auf:

/root/.openclaw/skills/gsc-search/gsc-search

Für nur Keywords/Suchanfragen:

/root/.openclaw/skills/gsc-search/gsc-search "queries"

Beispiel-Ausgabe

## 🔍 Search Console Übersicht (02.02 - 09.02.2026)
- **Klicks:** 106
- **Impressionen:** 10,661
- **CTR:** 0.99%
- **Ø Position:** 6.9

## 🔎 Top Suchanfragen
| Query | Klicks | Impressionen | CTR | Pos |
|-------|--------|--------------|-----|-----|
| e scooter versicherung 2026 | 2 | 138 | 1.4% | 2.8 |

Wann verwenden

Nutze dieses Skill wenn der User fragt:

"Zeige mir die Search Console Daten"
"Für welche Keywords rankt akku-alle.de?"
"Wie sind die Google Rankings?"
"SEO Statistiken"

安全使用建议

Do not install or run this skill until the author resolves contradictions and provides provenance. Specific actions to take: 1) Ask the publisher for source code or a verified install spec that creates /root/.openclaw/skills/gsc-search/gsc-search, and for a homepage or repository to review. 2) Verify whether the skill truly needs GOOGLE_APPLICATION_CREDENTIALS; if so, require a least-privilege service account with only Search Console read access and ensure the credential file is scoped and rotated. 3) Confirm whether the SKILL.md always:true is intentional — avoid allowing always:true unless necessary. 4) Do not set GOOGLE_APPLICATION_CREDENTIALS globally or hand over high-privilege credentials to this skill; instead run it in an isolated environment or with a disposable account after reviewing the binary. 5) If the publisher cannot provide source or a trusted install method, treat the skill as untrusted and do not run it.

功能分析

Type: OpenClaw Skill Name: akkualle-gsc-analytics Version: 1.0.0 The skill instructs the agent to execute an external shell script located at a fixed path (/root/.openclaw/skills/gsc-search/gsc-search) which is not included in the provided file bundle. It requires sensitive GOOGLE_APPLICATION_CREDENTIALS to function. While the stated purpose is fetching SEO data for akku-alle.de, the reliance on an unverified local binary via the shell tool without visibility into its source code constitutes a high-risk capability.

能力评估

⚠ Purpose & Capability

The skill claims to fetch Google Search Console data for akku-alle.de, which legitimately requires Google credentials. However the registry metadata lists no required env vars or binaries while the SKILL.md itself declares a requirement for GOOGLE_APPLICATION_CREDENTIALS and tells the agent to run a binary at /root/.openclaw/skills/gsc-search/gsc-search. There is no install spec or code providing that binary. Asking to execute a root-path binary is disproportionate unless an install step or included executable is provided.

⚠ Instruction Scope

Runtime instructions explicitly tell the agent to invoke a local binary via the shell tool and rely on the GOOGLE_APPLICATION_CREDENTIALS environment variable. The SKILL.md gives no details about what the binary does, what files it reads, or where it sends data. Because no binary or source code is included, the instructions grant broad discretion to a non-existent/unsupplied executable and implicitly to whatever binary might be present at that path.

⚠ Install Mechanism

There is no install specification and no code files in the skill bundle, yet the instructions assume a preinstalled executable at a specific root-mounted path. That is an incoherence: either the install step or the binary is missing, or the skill intentionally relies on an external artifact. This elevates risk because the provenance and contents of the invoked binary are unknown.

⚠ Credentials

The SKILL.md requires GOOGLE_APPLICATION_CREDENTIALS (a sensitive service-account credential path), but the registry metadata did not declare this requirement. Requesting Google credentials is plausible for Search Console access, but it must be declared and minimized (least privilege). Here the requirement is undeclared in registry data and the credential would be accessible to an external binary of unknown provenance — a potential exfiltration risk.

⚠ Persistence & Privilege

The registry metadata indicates always:false, but the SKILL.md metadata contains "always": true. This contradiction is important because always:true grants the skill persistent inclusion in agent runs. Combined with the credential requirement and the instruction to run a root-path binary, this increases the blast radius if the binary is malicious or misbehaving.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install akkualle-gsc-analytics
安装完成后，直接呼叫该 Skill 的名称或使用 /akkualle-gsc-analytics 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

GSC data extraction - clicks, impressions, CTR, rankings, top keywords

元数据

Slug akkualle-gsc-analytics

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题