google-maps-api-skill

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill runs a Python script to initiate and monitor data scraping tasks through the BrowserAct API.
  • [DATA_EXFILTRATION]: Communicates user-provided search queries and geographical filters to api.browseract.com. This network activity is restricted to the parameters required for the scraping service and does not involve sensitive local files or credentials.
  • [PROMPT_INJECTION]: The skill processes untrusted business data from Google Maps, creating an indirect prompt injection surface. The risk is minimal as the output is purely informational. Evidence:
  • Ingestion points: scripts/google_maps_api.py (fetching task results from API)
  • Boundary markers: Absent
  • Capability inventory: requests for network status polling
  • Sanitization: Absent
  • [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were found. The skill uses environment variables for API key management as recommended.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 12:04 PM