google-maps-research
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements comprehensive redaction logic in
scripts/google_maps_api.py(viasanitize_urlandsanitize_datafunctions) to ensure API keys are not printed or exposed in request/response logs. - [SAFE]: All network communication is directed to legitimate Google Cloud API endpoints (e.g.,
places.googleapis.com,maps.googleapis.com). - [SAFE]: Dependency management uses the well-known, standard package
python-dotenvvia PEP 723 inline script metadata. - [SAFE]: The documentation in
SKILL.mdandreferences/workflows.mdexplicitly warns against printing, inspecting, or committing secret values, and follows least-privilege principles by encouraging specific field masks. - [SAFE]: The code uses standard Python libraries (
urllib,argparse,json) and does not employ any dangerous execution patterns likeeval(),exec(), orsubprocesscalls to untrusted external scripts.
Audit Metadata