react-google-maps
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides reference implementations and documentation for integrating the official
@vis.gl/react-google-mapslibrary into React/Next.js projects. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official, well-known libraries (
@vis.gl/react-google-mapsand@googlemaps/markerclusterer) from the standard npm registry. These sources are considered safe and are required for the library's functionality. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by using environment variables (
process.env.NEXT_PUBLIC_GOOGLE_MAPS_API_KEY) for API keys and provides generic placeholders for configuration parameters, avoiding hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: The skill implements patterns to ingest data from the Google Places API in
references/places-autocomplete.md. While this constitutes an attack surface for indirect prompt injection, the skill does not possess dangerous capabilities (such as shell execution or file system writes) that would allow for escalation or exploitation within the context of this documentation.
Audit Metadata