google-maps-scraper

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to perform API operations. These commands are purpose-specific for the scraping service provided by the author (gmapsscraper.io) and do not involve suspicious shell piping or arbitrary code execution.
  • [EXTERNAL_DOWNLOADS]: Data and configuration are retrieved from the vendor's official domain (gmapsscraper.io). This is expected behavior for the skill's stated purpose of scraping data via their service.
  • [CREDENTIALS_UNSAFE]: The skill manages authentication securely by utilizing the GMAPS_SCRAPER_API_KEY environment variable. It correctly instructs the user to set this variable rather than embedding sensitive keys within the skill files.
  • [PROMPT_INJECTION]: No malicious prompt injection or behavior override patterns were detected. The instructions are focused on guiding the agent through the scraping workflow and confirmation steps.
  • [SAFE]: The skill lacks obfuscation, persistence mechanisms, or unauthorized data access patterns. Its functionality aligns with its description as a data scraping tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:00 AM
Security Audit — agent-trust-hub — google-maps-scraper