gmaps
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implementation follows security best practices for API interaction and credential management.
- Credential Management: Sensitive information is handled securely by retrieving the
GOOGLE_MAPS_API_KEYfrom the environment viascripts/lib/config.ts, avoiding hardcoded secrets. - Network Security: The skill exclusively communicates with official Google domains (
maps.googleapis.com,routes.googleapis.com,places.googleapis.com), which are recognized as well-known and trusted services. - Input Sanitization: User-supplied flags are rigorously validated for presence, format, and range (e.g., geographic coordinate validation in
scripts/commands/elevation.tsandscripts/commands/reverse-geocode.ts) before being used in requests. - Logic Integrity: The code is transparent and focused on its stated purpose, with no evidence of obfuscation, hidden command execution, or unauthorized data access.
Audit Metadata