maps
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with reputable and well-known mapping services including OpenStreetMap's Nominatim, the Overpass API, Project-OSRM, and TimeAPI.io.\n- [SAFE]: All operations are performed using the Python standard library, avoiding security risks associated with third-party package dependencies.\n- [SAFE]: No hardcoded credentials, sensitive file access, or suspicious data exfiltration patterns were detected. All network communication is directed to appropriate, documented mapping service endpoints.\n- [SAFE]: User inputs such as search queries and location names are properly URL-encoded using standard library utilities before being sent to external APIs.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from community-maintained mapping sources, which represents a theoretical surface for indirect prompt injection. However, this risk is inherent to tools that fetch external information and is considered safe given the tool's utility and standard implementation.\n
- Ingestion points: maps_client.py fetches and parses JSON data from the Nominatim and Overpass APIs.\n
- Boundary markers: None present in the instructions.\n
- Capability inventory: The skill uses the terminal toolset to execute its local Python script.\n
- Sanitization: Inputs are sanitized via URL encoding; API responses are handled as structured JSON.
Audit Metadata