goplaces
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
goplacesCLI tool. - The documentation points to a Homebrew tap for installation:
brew install steipete/tap/goplaces. - The tool is hosted on a public GitHub repository at
https://github.com/steipete/goplaces. - [CREDENTIALS_UNSAFE]: The skill requires a Google Places API key to function.
- It utilizes the
GOOGLE_PLACES_API_KEYenvironment variable to manage this sensitive information, which is a standard and recommended practice. - No API keys or secrets are hardcoded within the skill's source files.
- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands to search for places, resolve addresses, and fetch place details.
- Examples:
goplaces search "coffee",goplaces details <place_id> --reviews. - These commands are intended for local execution and are consistent with the skill's primary purpose of providing a human-friendly wrapper for the Google Places API.
Audit Metadata