Skills google-maps-reviews-api-skill

📦

google-maps-reviews-api-skill

Name: google-maps-reviews-api-skill
Author: browser-act

Content revision r2 Safe 🌐 Network access🔑 Env variables⚙️ External commands

Extract Google Maps Reviews with BrowserAct

Manual review collection is slow and difficult to monitor across locations. This skill starts BrowserAct review workflows and reports task progress from the command line.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "google-maps-reviews-api-skill" from https://skillstore.io/skills/browser-act-google-maps-reviews-api-skill.md and its manifest at https://skillstore.io/api/skills/browser-act-google-maps-reviews-api-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/browser-act-google-maps-reviews-api-skill.md Signed manifest GET /api/skills/browser-act-google-maps-reviews-api-skill/manifest Signed lockfile GET /api/skills/browser-act-google-maps-reviews-api-skill/lockfile

Test it

Using "google-maps-reviews-api-skill". Find reviews for coffee shops in Seattle using English.

Expected outcome:

The BrowserAct task starts and prints timestamped progress. After completion, the current script reports a timeout because result retrieval is unreachable.

Using "google-maps-reviews-api-skill". Collect reviews without a configured BrowserAct credential.

Expected outcome:

The script reports that the BrowserAct API key is missing and displays the account integrations page.

Security Audit

Safe

v6 • 7/23/2026 Open versioned report

The skill makes expected HTTPS requests to BrowserAct and reads an API key from the environment; Markdown formatting and error handling account for most alerts. Two instructions ask users to provide the API key to the agent, creating a high-risk secret disclosure path. No prompt injection or hidden command execution was found.

Files scanned

204

Lines analyzed

Review items

False positives ignored

Capability review items (5)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/google_maps_reviews_api.py:104

Generic API/secret keys

print("3. Provide it to me or set it as an environment variable (BROWSERACT_API_KEY).", flush=True)

The error message tells the user to provide the API key to the agent as an alternative to local configuration. This encourages secret disclosure through the conversation.

High

SKILL.md:20

Generic API/secret keys

Before running, check the `BROWSERACT_API_KEY` environment variable. If not set, do not take other m

The instruction tells the agent to ask for and wait for the user's API key when the environment variable is absent. This explicitly solicits a credential into the conversation.

Low

scripts/google_maps_reviews_api.py:31

Python HTTP libraries

response = requests.post(f"{API_BASE_URL}/run-task-by-template", json=payload, headers=headers, time

The request sends the workflow identifier, user-supplied search parameters, and an authorization header to BrowserAct. This is declared functionality, but it is a real third-party data transfer.

Low

scripts/google_maps_reviews_api.py:56

Python HTTP libraries

status_res = requests.get(f"{API_BASE_URL}/get-task-status?task_id={task_id}", headers=headers, time

The polling request sends a task identifier and bearer credential to the fixed BrowserAct endpoint. The transfer is expected but creates an external network dependency.

Low

scripts/google_maps_reviews_api.py:78

Python HTTP libraries

task_info = requests.get(f"{API_BASE_URL}/get-task?task_id={task_id}", headers=headers, timeout=30).

The result request sends the task identifier and bearer credential to BrowserAct. This is intended API use, but it remains a real outbound transfer.

Risk Factors

🌐 Network access (6)

scripts/google_maps_reviews_api.py:31 scripts/google_maps_reviews_api.py:56 scripts/google_maps_reviews_api.py:78 scripts/google_maps_reviews_api.py:15 scripts/google_maps_reviews_api.py:102 SKILL.md:22

🔑 Env variables (10)

scripts/google_maps_reviews_api.py:93 scripts/google_maps_reviews_api.py:93 scripts/google_maps_reviews_api.py:17 scripts/google_maps_reviews_api.py:18 scripts/google_maps_reviews_api.py:93 scripts/google_maps_reviews_api.py:99 scripts/google_maps_reviews_api.py:104 scripts/google_maps_reviews_api.py:111 SKILL.md:4 SKILL.md:20

⚙️ External commands (21)

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/browser-act-google-maps-reviews-api-skill/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/browser-act-google-maps-reviews-api-skill/security.svg)](https://skillstore.io/skills/browser-act-google-maps-reviews-api-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/browser-act-google-maps-reviews-api-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/browser-act-google-maps-reviews-api-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/browser-act-google-maps-reviews-api-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

browser-act. (2026). google-maps-reviews-api-skill security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/browser-act-google-maps-reviews-api-skill/audits/6

BibTeX citation

@techreport{browser-act-browser-act-google-maps-reviews-api-skill-2026,
  author = {browser-act},
  title = {google-maps-reviews-api-skill security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/browser-act-google-maps-reviews-api-skill/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "google-maps-reviews-api-skill security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "browser-act"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/browser-act-google-maps-reviews-api-skill/audits/6"
identifiers:
  - type: other
    value: "skillstore:browser-act-google-maps-reviews-api-skill:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Monitor a Local Location

Collect review tasks for one restaurant, clinic, shop, or attraction in a selected country and language.

Compare Nearby Competitors

Run separate searches for competing businesses and prepare their review data for later comparison.

Investigate Customer Feedback

Gather review fields for downstream analysis of ratings, praise, complaints, and service quality.

Try These Prompts

Collect Business Reviews

Collect reviews for {business_or_category} in {country} using {language}. Report task progress and summarize any returned reviews.

Compare Two Businesses

Run separate review searches for {business_a} and {business_b} in {country}. Compare ratings, recurring praise, and common complaints.

Review a New Location

Collect reviews for {location_name} in {country} using {language}. Highlight service issues, positive themes, and recent feedback.

Prepare a Regional Analysis

Run review searches for {business_list} across {countries}. Organize findings by location, rating pattern, complaint theme, and data limitation.

Best Practices

Set BROWSERACT_API_KEY in the local environment and never paste it into a chat.
Confirm the search terms, language, and country before starting a paid BrowserAct task.
Review BrowserAct usage terms and protect reviewer profile data in downstream storage.

Avoid

Do not ask users to disclose API keys in messages or prompts.
Do not promise completed review data until the polling control-flow defect is fixed.
Do not treat public profile fields as unrestricted data for resale or outreach.

Frequently Asked Questions

Does this skill require an API key?

Yes. It requires a BrowserAct API key configured through the BROWSERACT_API_KEY environment variable.

Which search parameters are supported?

The script accepts search keywords, a language code, and a country code.

How long can a task run?

The polling loop waits up to five minutes and checks status every ten seconds.

Which review fields are expected?

The documented fields include reviewer name, profile links, rating, review text, date, likes, and avatar URL.

Does the skill analyze sentiment automatically?

No. It gathers review data for later analysis but includes no dedicated sentiment model.

Why are completed results not displayed?

The current script always returns after polling, which makes its result-retrieval block unreachable.

Developer Details

Author

browser-act

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/browser-act/skills/tree/main/solutions/lead-generation/google-maps-reviews-api-skill

Ref

a39a91716eadede5f4cdefd78178fed4e837a128

Maintenance freshness

7/24/2026

Usage

5 downloads · 84 views

File structure

📁 scripts/

📄 google_maps_reviews_api.py

📄 SKILL.md