location-suche
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
nominatim.openstreetmap.organdoverpass-api.deto retrieve geographic coordinates and point-of-interest data. These are well-known public services for OpenStreetMap data and are used as intended for the skill's primary purpose. - [DATA_EXFILTRATION]: User-provided search queries (e.g., location names, categories like 'restaurant') are sent to the OpenStreetMap APIs. No sensitive local data, environment variables, or credentials are accessed or transmitted.
- [COMMAND_EXECUTION]: The skill uses standard Python logic to process search results and print them to the console. It does not execute shell commands or use any dynamic execution functions like
eval()orexec(). - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external APIs (Nominatim and Overpass). However, it lacks exploitable capabilities such as file system writing or command execution, rendering the risk of indirect prompt injection negligible. The output is simply displayed to the user.
Audit Metadata