google-maps-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill coordinates complex workflows by executing local shell and Node.js scripts for query validation, container lifecycle management, and status monitoring.
- [EXTERNAL_DOWNLOADS]: Downloads the official
gosom/google-maps-scraperDocker image to execute scraping tasks locally. It also performs version checks usingnpxto ensure the skill remains up to date. These resources originate from the vendor's own infrastructure. - [CREDENTIALS_UNSAFE]: Implements a secure handling flow for proxy credentials by using a masked input script (
configure-proxy.sh). Secrets are stored in a local configuration file with restricted (0600) permissions and are mounted to Docker as read-only secrets, ensuring they are never logged or exposed in the chat context. - [INDIRECT_PROMPT_INJECTION]: The skill processes and previews results from Google Maps. While this involves processing untrusted external data, the risk is mitigated by the skill's focus on structured data (CSV/JSON) and explicit guardrails in the instructions.
Audit Metadata