skills/clawlink-hq/skills/google-maps/Gen Agent Trust Hub

google-maps

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands via npx to interact with the @useclawlink/cli. This includes logging in, connecting to Google Maps, and executing specific actions based on agent or user input.
  • [EXTERNAL_DOWNLOADS]: The skill references and executes the @useclawlink/cli package, which is hosted on the official npm registry. These downloads are standard for utilizing the vendor's provided tooling.
  • [CREDENTIALS_UNSAFE]: The skill manages authentication tokens by storing them in a dedicated local directory at ~/.clawlink/credentials.json. This is a documented and standard approach for CLI-based session persistence and does not involve hardcoded secrets or access to sensitive system files like SSH keys or AWS credentials.
  • [REMOTE_CODE_EXECUTION]: The use of npx to run the vendor's CLI tool is the primary method of operation. The commands are structured to perform specific Google Maps tasks (geocoding, routing, etc.) rather than executing arbitrary remote scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 02:42 PM
Security Audit — agent-trust-hub — google-maps