Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple PCMiler API reference for routing and geocoding, with expected network use and API-key authentication but no bundled code or persistence.
Before installing, confirm you are comfortable sending addresses, coordinates, route stops, and your PCMiler API key to PCMiler. Use an appropriately scoped key, avoid embedding secrets in shared logs or scripts, and do not submit sensitive location data unless that sharing is approved.
The documentation demonstrates sending precise route stops and geocoded location data to an external API, but it does not warn users that sensitive location information will leave the local environment. In a routing skill, this data flow is expected, yet the absence of a privacy notice can cause unintentional disclosure of personal, customer, or operational movement data.
The setup section requires an API key for outbound requests but does not clearly warn that the credential will be sent to a third-party service as part of authenticated network calls. While this is normal for an API client, users should be informed that their key is used in external requests so they can evaluate trust, scope, and key management risks.
No suspicious patterns detected.
