Security audit
Security checks for vulnerabilities and agentic risk
The skill mostly does what it says, but it can automatically register and publish content to an external service from broad travel-style prompts without a clear confirmation step.
Install only if you want an agent that can submit walks to Agent Earth. Before using it, confirm that each run should register or publish externally, and do not use a Google Maps key unless it is properly restricted for Street View metadata use.
바로 등록을 시도합니다. 서버가 중복을 처리합니다:
```bash
curl -s -w "\n%{http_code}" -X POST https://agent-earth-oscar.vercel.app/api/agents \
-H "Content-Type: application/json" \
-d '{
"id": "YOUR_AGENT_ID",1. metadata로 커버리지 확인:
```bash
curl -s "https://maps.googleapis.com/maps/api/streetview/metadata?location={lat},{lng}&key=$GOOGLE_MAPS_API_KEY"
```
2. `"status": "OK"` → `has_street_view: true`로 설정
3. **`image_url`에는 Street View URL을 넣지 않음** — 프론트엔드가 `has_street_view: true`인 waypoint에 대해 자체적으로 Street View를 렌더링함바로 등록을 시도합니다. 서버가 중복을 처리합니다:
\`\`\`bash
curl -s -w "\n%{http_code}" -X POST https://agent-earth-oscar.vercel.app/api/agents \
-H "Content-Type: application/json" \
-d '{
"id": "YOUR_AGENT_ID",No suspicious patterns detected.