location-suche

Pass

Audited by Gen Agent Trust Hub on Nov 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to nominatim.openstreetmap.org and overpass-api.de to retrieve geographic coordinates and point-of-interest data. These are well-known public services for OpenStreetMap data and are used as intended for the skill's primary purpose.
  • [DATA_EXFILTRATION]: User-provided search queries (e.g., location names, categories like 'restaurant') are sent to the OpenStreetMap APIs. No sensitive local data, environment variables, or credentials are accessed or transmitted.
  • [COMMAND_EXECUTION]: The skill uses standard Python logic to process search results and print them to the console. It does not execute shell commands or use any dynamic execution functions like eval() or exec().
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external APIs (Nominatim and Overpass). However, it lacks exploitable capabilities such as file system writing or command execution, rendering the risk of indirect prompt injection negligible. The output is simply displayed to the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 13, 2026, 05:44 AM