google-maps-api-skill
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill runs a Python script to initiate and monitor data scraping tasks through the BrowserAct API.
- [DATA_EXFILTRATION]: Communicates user-provided search queries and geographical filters to
api.browseract.com. This network activity is restricted to the parameters required for the scraping service and does not involve sensitive local files or credentials. - [PROMPT_INJECTION]: The skill processes untrusted business data from Google Maps, creating an indirect prompt injection surface. The risk is minimal as the output is purely informational. Evidence:
- Ingestion points:
scripts/google_maps_api.py(fetching task results from API) - Boundary markers: Absent
- Capability inventory:
requestsfor network status polling - Sanitization: Absent
- [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were found. The skill uses environment variables for API key management as recommended.
Audit Metadata