google-maps
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands via
npxto interact with the@useclawlink/cli. This includes logging in, connecting to Google Maps, and executing specific actions based on agent or user input. - [EXTERNAL_DOWNLOADS]: The skill references and executes the
@useclawlink/clipackage, which is hosted on the official npm registry. These downloads are standard for utilizing the vendor's provided tooling. - [CREDENTIALS_UNSAFE]: The skill manages authentication tokens by storing them in a dedicated local directory at
~/.clawlink/credentials.json. This is a documented and standard approach for CLI-based session persistence and does not involve hardcoded secrets or access to sensitive system files like SSH keys or AWS credentials. - [REMOTE_CODE_EXECUTION]: The use of
npxto run the vendor's CLI tool is the primary method of operation. The commands are structured to perform specific Google Maps tasks (geocoding, routing, etc.) rather than executing arbitrary remote scripts.
Audit Metadata