google-maps-api-skill
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external business listings on Google Maps, which could theoretically contain malicious text intended to influence agent behavior.
- Ingestion points: Data is retrieved from the BrowserAct API in
scripts/google_maps_api.pyand passed to the agent. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the scraped data.
- Capability inventory: The skill provides functionality to fetch business titles, categories, addresses, websites, and reviews.
- Sanitization: There is no explicit sanitization of the scraped business data before it is presented to the agent.
- [EXTERNAL_DOWNLOADS]: The script
scripts/google_maps_api.pymakes network requests toapi.browseract.comto manage scraping tasks and retrieve results. These are vendor-owned resources used for the skill's primary function.
Audit Metadata