find-route
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with several external services to provide journey data, including OpenStreetMap (via Nominatim and OSRM), Transport for London (TfL), and the Google Routes API. These connections are standard for the skill's purpose and utilize well-known, documented API endpoints.
- [REMOTE_CODE_EXECUTION]: The skill includes a
scripts/check-update.shscript that fetches version data and source code archives from the author's GitHub repository (HartreeWorks/skill--find-route). TheSKILL.mdinstructions explicitly guide the agent to review code differences and obtain user approval before applying updates, ensuring transparency and human control over the update process. - [COMMAND_EXECUTION]: The
scripts/routePython script can optionally invoke thegcloudCLI tool to retrieve API keys if a project ID is configured. This functionality is a helper for users who manage their Google Cloud credentials via the official CLI and does not involve user-controlled command injection.
Audit Metadata