google-maps-reviews
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor API at
https://ai-factory.frevana.comto fetch review data. This is a legitimate functional requirement and uses standard HTTPS. - [COMMAND_EXECUTION]: A Bash script uses
curlfor network requests andpython3for JSON validation and payload construction. All inputs are handled as variables and passed to Python for parsing, minimizing shell injection risks. - [CREDENTIALS_UNSAFE]: The skill uses a
FREVANA_TOKENfor authentication. It correctly supports environment variables or a--tokenflag rather than hardcoding credentials. It also includes an interactive fallback to prompt the user for the token if it is missing.
Audit Metadata