local-places

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill establishes a local FastAPI server to interface with the official Google Places API. All network communication is restricted to the local environment and the well-known Google API endpoint (places.googleapis.com), with no evidence of unauthorized data exfiltration.- [SAFE]: Sensitive information, specifically the Google Places API key, is handled securely. The skill instructions and implementation rely on environment variables and .env files, adhering to best practices for secret management and preventing credential exposure.- [SAFE]: The skill's dependencies, including FastAPI, HTTPX, and Uvicorn, are standard and reputable packages from the official Python Package Index (PyPI). No suspicious, typosquatted, or unverified libraries are utilized.- [SAFE]: The provided agent instructions are strictly operational and focused on defining search parameters and conversational flow. There are no attempts to override safety filters, perform prompt injection, or hide malicious intent within the skill metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 10:45 PM
Security Audit — agent-trust-hub — local-places