Google Maps Search Api
v0.1.0This skill is designed to help users automatically extract business data from Google Maps search results. When a user asks to "find coffee shops in New York," "search for dental clinics," or "extract business leads from Google Maps," the agent should proactively apply this skill.
⭐ 1· 1.9k·8 current·8 all-time
byHenk Nie@phheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill's claimed purpose (extract business data from Google Maps) matches its implementation: the script posts a workflow to api.browseract.com to run a BrowserAct template that scrapes Google Maps. This is a plausible design choice for web automation/scraping. However, registry metadata lists no required environment variables or primary credential, while both SKILL.md and the script require BROWSERACT_API_KEY — a clear inconsistency between declared requirements and actual needs.
Instruction Scope
SKILL.md instructs the agent to check for BROWSERACT_API_KEY, ask the user to provide it if missing, and run the included Python script with search parameters. The instructions only reference BrowserAct and google.com/maps as the target; they do not request unrelated system files, other credentials, or unknown external endpoints. Error handling and retry logic are limited and scoped to the task.
Install Mechanism
There is no installer (instruction-only skill with an included script), so no high-risk downloads occur. However, the script imports the third-party 'requests' library but neither the SKILL.md nor the registry metadata documents this dependency; that may cause runtime failures or unexpected behavior if the environment lacks the library.
Credentials
The script and SKILL.md require BROWSERACT_API_KEY (a bearer token used with api.browseract.com), which is proportionate to the task. The concern is that the skill registry metadata lists no required env vars or primary credential — meaning the platform may not prompt or warn users about supplying an API key. Only a single external credential is used, which is appropriate, but the omission in metadata is a security/usability gap.
Persistence & Privilege
The skill does not request persistent privileges (always: false), does not write to system configuration, and does not attempt to modify other skills. It runs as a transient operation calling BrowserAct APIs, so privilege/persistence concerns are low.
What to consider before installing
This skill appears to do what it says (it uses BrowserAct to scrape Google Maps), but before installing you should: (1) be aware you must supply a BrowserAct API key (BROWSERACT_API_KEY) — the skill metadata does not declare this, so the platform may not prompt you automatically; (2) verify you trust BrowserAct (api.browseract.com) because the service will perform the scraping on your behalf and will receive your API key and task details; (3) avoid pasting your API key into public chat; set it as an environment variable instead; (4) ensure the runtime environment has Python and the 'requests' package installed (SKILL.md doesn't declare this dependency); (5) consider legal/terms-of-service implications of scraping Google Maps and any rate/billing impacts from BrowserAct usage; and (6) if you need higher assurance, ask the skill author for a homepage or source origin and confirm the BrowserAct TEMPLATE_ID and expected output schema before providing credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk9782bpe0rvakewcn17gw24s5980neyc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.