google-maps-research

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements comprehensive redaction logic in scripts/google_maps_api.py (via sanitize_url and sanitize_data functions) to ensure API keys are not printed or exposed in request/response logs.
  • [SAFE]: All network communication is directed to legitimate Google Cloud API endpoints (e.g., places.googleapis.com, maps.googleapis.com).
  • [SAFE]: Dependency management uses the well-known, standard package python-dotenv via PEP 723 inline script metadata.
  • [SAFE]: The documentation in SKILL.md and references/workflows.md explicitly warns against printing, inspecting, or committing secret values, and follows least-privilege principles by encouraging specific field masks.
  • [SAFE]: The code uses standard Python libraries (urllib, argparse, json) and does not employ any dangerous execution patterns like eval(), exec(), or subprocess calls to untrusted external scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 04:15 PM
Security Audit — agent-trust-hub — google-maps-research