google-maps-scraper
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources (Google Maps reviews and business details) which could contain malicious instructions.
- Ingestion points: Data enters the agent context via
gmaps_get_resultsandgmaps_get_reviews_resultsas described inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the scraped content.
- Capability inventory: The skill utilizes network operations via the vendor's API and provides tools for lead generation and review retrieval.
- Sanitization: There is no mention of filtering or sanitizing the retrieved text content before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill references and installs vendor-owned SDKs and connects to a remote MCP server hosted by the service provider.
- Evidence: Mentions installation of
google-maps-scraper-sdk(PyPI/Cargo/RubyGems) and@gmapsleadfinder/google-maps-scraper(NPM), and connection tohttps://gmapsleadfinder.com/mcp. - Analysis: These resources originate from the skill author's infrastructure and are intended for the skill's primary purpose.
Audit Metadata