google-maps
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@cablate/mcp-google-mappackage from the NPM registry. This package belongs to the skill's vendor and is used to provide the underlying CLI functionality for geographic lookups. - [COMMAND_EXECUTION]: The skill relies on shell command execution via the pattern
npx -y @cablate/mcp-google-map exec <tool> '<json_params>'to interact with Google Maps APIs. Each tool invocation is stateless and processes JSON parameters to return geographic data. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted third-party data from the Google Maps API, including user reviews, editorial summaries, and AI-generated summaries.
- Ingestion points: Data is ingested through the
maps_place_details,maps_search_places, andmaps_explore_areatools defined inreferences/tools-api.md. - Boundary markers: No specific delimiters or warnings to ignore embedded instructions are present in the skill instructions.
- Capability inventory: The skill possesses shell execution capabilities via
npxand network access through the underlying CLI tool. - Sanitization: The skill instructs the agent to summarize the useful results instead of returning raw JSON, which acts as a basic filter for the ingested content.
Audit Metadata