Security audit
Security checks for vulnerabilities and agentic risk
This maps SEO skill is coherent and disclosed, with only minor cautions about a broad trigger and a saved report file.
Use this skill when you intentionally want local maps SEO analysis. Prefer invoking it with /seo maps or another explicit maps-SEO request, review any paid API confirmation before proceeding, and remember that the generated Markdown report may contain business/location and competitive-analysis data.
The trigger phrase "maps" is so broad that it can activate on many ordinary user requests unrelated to this skill’s intended scope. Over-broad invocation increases the chance of unintended tool use, unnecessary external API calls, and accidental disclosure or persistence of user-provided business/location data during an analysis the user did not actually request.
The skill explicitly generates a file containing analysis results but does not warn the user that output will be written to disk. This can create an unexpected persistence/privacy issue because business identifiers, locations, review intelligence, competitive analysis, and possibly API-derived data may be stored locally without informed user consent.
