local-business-finder
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits search queries and authentication tokens to
gmapsscraper.io. This communication is essential for the skill's primary function and targets the infrastructure owned by the skill's author. - [COMMAND_EXECUTION]: Uses the
curlcommand-line tool to interact with external API endpoints. The commands are structured and do not appear to allow for arbitrary shell injection. - [PROMPT_INJECTION]: The skill is subject to an indirect prompt injection surface (Category 8) because it processes and displays data (such as business names or reviews) retrieved from the internet.
- Ingestion points: Data is downloaded via
curlintobusinesses.csvand subsequently presented to the user. - Boundary markers: The workflow does not explicitly mention the use of delimiters or instructions to the agent to ignore instructions embedded within the business data.
- Capability inventory: The agent displays the data and can pass it to other skills like
cold-email-local-business. - Sanitization: There are no mentioned mechanisms for filtering or sanitizing the content retrieved from the Google Maps data via the API.
Audit Metadata