google-maps-scraper
Fail
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: HIGHCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
curl,bash, andpython3to interact with a local API (localhost:8080) and run utility scripts provided with the kit. These commands are necessary for the scraper's functionality and are restricted to the local environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes business listings and contact information scraped from Google Maps and third-party websites. This data is untrusted and could contain malicious instructions designed to manipulate the agent's behavior during data presentation or lead summarization.\n - Ingestion points: Data retrieved from
localhost:8080(API responses andresults.csv).\n - Boundary markers: The skill does not provide specific instructions to the agent to treat external content as untrusted or use delimiters.\n
- Capability inventory: The agent has access to
curl,bash, andpython3for tool execution.\n - Sanitization: No explicit sanitization or filtering of the scraped content is performed before processing.
Recommendations
- HIGH: Downloads and executes remote code from: http://localhost:8080/api/v1/jobs/$ID/download - DO NOT USE without thorough review
Audit Metadata