Security audit

Location Service

Security checks across malware telemetry and agentic risk

Overview

This location skill mostly does what it claims, but its short Google Maps link handling can make unintended network requests while processing sensitive location data.

Review before installing. Use it only with addresses, coordinates, or map links you are comfortable sending to third-party services, and avoid untrusted short Google Maps links until the skill enforces exact allowed hostnames, HTTPS, redirect limits, and private-network blocking.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 93% confidence
Finding: The skill advertises network access and executable scripts, including HTTP redirect resolution and Python tooling, but does not declare permissions or warn users about those capabilities. This creates a transparency and consent problem: users may provide sensitive location data without realizing it will be transmitted externally or processed by code with shell/network access.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: Resolving `maps.app.goo.gl` short links requires a network request that discloses the user's interest in a specific location URL to external infrastructure before the destination is known. Because no privacy or transmission warning is provided, users may unknowingly trigger outbound requests involving sensitive location data or tracking identifiers.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: Geocoding and weather lookups inherently send addresses, coordinates, or place names to third-party services, which can reveal precise user location or sensitive destinations. The absence of a clear disclosure materially increases privacy risk because the skill context centers on highly sensitive geographic information.

Missing User Warnings

Low

Confidence: 86% confidence
Finding: The script transmits user-supplied latitude and longitude to the external Nominatim service, which can expose sensitive location data to a third party without any explicit in-tool notice or consent mechanism. While this is expected for reverse geocoding functionality, location data is privacy-sensitive, so the lack of disclosure and control is a real privacy weakness rather than a direct code-execution flaw.

Missing User Warnings

Low

Confidence: 88% confidence
Finding: Resolving maps.app.goo.gl links causes outbound network requests to Google without explicit user-facing disclosure, which can expose user-supplied URLs and metadata such as IP address and timing. In a skill environment, silent external requests are security-relevant because users may not expect that simply parsing a URL triggers network access.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.