Skills google-maps-search-api-skill

📦

google-maps-search-api-skill

Name: google-maps-search-api-skill
Author: browser-act

Content revision r2 Safe 🌐 Network access🔑 Env variables⚙️ External commands

Find Local Businesses with Google Maps Search

Collecting comparable local business data manually is slow and inconsistent. This skill submits Google Maps searches through BrowserAct and monitors each task.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "google-maps-search-api-skill" from https://skillstore.io/skills/browser-act-google-maps-search-api-skill.md and its manifest at https://skillstore.io/api/skills/browser-act-google-maps-search-api-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/browser-act-google-maps-search-api-skill.md Signed manifest GET /api/skills/browser-act-google-maps-search-api-skill/manifest Signed lockfile GET /api/skills/browser-act-google-maps-search-api-skill/lockfile

Test it

Using "google-maps-search-api-skill". Find 25 coffee shops in Toronto.

Expected outcome:

The task started and reported a finished status. The current script then reported a timeout and returned no business records.

Using "google-maps-search-api-skill". Search for dental clinics without a configured API key.

Expected outcome:

The search did not start because the BrowserAct API key was missing. Configure the protected environment variable before retrying.

Using "google-maps-search-api-skill". Run a search with an expired BrowserAct key.

Expected outcome:

The API rejected authorization. The search stopped without retrying and advised checking the BrowserAct key.

Security Audit

Safe

v7 • 7/23/2026 Open versioned report

The skill makes expected HTTPS requests to BrowserAct and reads one named environment variable. Two instructions ask users to provide an API key to the agent, creating a credential exposure risk. Markdown backticks and error checks are not command execution or reconnaissance.

Files scanned

209

Lines analyzed

Review items

False positives ignored

Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/google_maps_search_api.py:101

Generic API/secret keys

print("3. Provide it to me or set it as an environment variable (BROWSERACT_API_KEY).", flush=True)

The message tells the user to provide an API key to the agent, which can place a reusable credential in conversation history. A protected environment should be the only supported path.

High

SKILL.md:20

Generic API/secret keys

Before running, check the `BROWSERACT_API_KEY` environment variable. If not set, do not take other m

The instruction tells the agent to ask and wait for the user to provide an API key. This encourages credential disclosure through the conversation instead of protected secret storage.

Low

scripts/google_maps_search_api.py:32

Python HTTP libraries

res = requests.post(f"{API_BASE_URL}/run-task-by-template", json=payload, headers=headers, timeout=3

This request sends the search parameters and bearer credential to the fixed BrowserAct API. The network access is expected but exposes user inputs to an external service.

Low

scripts/google_maps_search_api.py:53

Python HTTP libraries

status_res = requests.get(f"{API_BASE_URL}/get-task-status?task_id={task_id}", headers=headers, time

This polling request sends a task identifier and bearer credential to BrowserAct. It is necessary for the workflow but is real external network access.

Low

scripts/google_maps_search_api.py:90

Python getenv function

api_key = os.getenv("BROWSERACT_API_KEY")

The script reads the named BROWSERACT_API_KEY environment variable. The access is limited and expected, but it grants the script access to a credential.

Low

scripts/google_maps_search_api.py:90

getenv function call

api_key = os.getenv("BROWSERACT_API_KEY")

The getenv call reads the named BrowserAct credential from the process environment. It does not enumerate other variables, so the exposure is limited.

Risk Factors

🌐 Network access (6)

scripts/google_maps_search_api.py:32 scripts/google_maps_search_api.py:53 scripts/google_maps_search_api.py:75 scripts/google_maps_search_api.py:15 scripts/google_maps_search_api.py:99 SKILL.md:22

🔑 Env variables (10)

scripts/google_maps_search_api.py:90 scripts/google_maps_search_api.py:90 scripts/google_maps_search_api.py:17 scripts/google_maps_search_api.py:18 scripts/google_maps_search_api.py:90 scripts/google_maps_search_api.py:96 scripts/google_maps_search_api.py:101 scripts/google_maps_search_api.py:109 SKILL.md:4 SKILL.md:20

⚙️ External commands (25)

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/browser-act-google-maps-search-api-skill/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/browser-act-google-maps-search-api-skill/security.svg)](https://skillstore.io/skills/browser-act-google-maps-search-api-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/browser-act-google-maps-search-api-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/browser-act-google-maps-search-api-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/browser-act-google-maps-search-api-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

browser-act. (2026). google-maps-search-api-skill security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/browser-act-google-maps-search-api-skill/audits/7

BibTeX citation

@techreport{browser-act-browser-act-google-maps-search-api-skill-2026,
  author = {browser-act},
  title = {google-maps-search-api-skill security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/browser-act-google-maps-search-api-skill/audits/7},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "google-maps-search-api-skill security audit report (audit version 7)"
version: "unspecified"
type: report
authors:
  - name: "browser-act"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/browser-act-google-maps-search-api-skill/audits/7"
identifiers:
  - type: other
    value: "skillstore:browser-act-google-maps-search-api-skill:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Build Local Prospect Lists

Launch targeted business searches by category and region, then track each collection task.

Survey Regional Competition

Run consistent searches across locations to support later comparison of local market coverage.

Discover Nearby Services

Search localized business categories with selected language, country, and result limits.

Try These Prompts

Start a Local Search

Search for coffee shops in Toronto with English and Canada settings. Use a limit of 25 and report task status.

Monitor a Larger Search

Run a German search for dental clinics in Berlin with a limit of 50. Report authorization, task, or timeout errors clearly.

Compare Task Outcomes

Launch separate searches for coworking spaces in London and Manchester. Use identical settings and compare task completion outcomes.

Plan Global Research

Plan hotel searches for Paris, Tokyo, and Sydney. Confirm languages, countries, limits, and external data sharing before execution.

Best Practices

Store the API key in a protected environment or secret manager.
Start with a small result limit before requesting larger searches.
Confirm language, country, and external data sharing before execution.

Avoid

Do not paste API keys into prompts, chat messages, or logs.
Do not submit confidential search terms without reviewing BrowserAct data handling.
Do not promise structured records until the unreachable result retrieval block is fixed.

Frequently Asked Questions

What setup is required?

Install Python and requests, create a BrowserAct account, and configure BROWSERACT_API_KEY in a protected environment.

Does the script call Google Maps directly?

No. It invokes a fixed BrowserAct workflow that performs the Google Maps search.

Can the current script return business records?

Not reliably. The script exits after polling before its result retrieval block can run.

How long can one task run?

The polling loop waits up to five minutes and checks status every ten seconds.

Which search options are supported?

The script accepts keywords, language, country, and a maximum result count.

Are search requests private?

No. Search terms, localization settings, task identifiers, and API authorization are sent to BrowserAct over HTTPS.

Developer Details

Author

browser-act

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/browser-act/skills/tree/main/solutions/lead-generation/google-maps-search-api-skill

Ref

a39a91716eadede5f4cdefd78178fed4e837a128

Maintenance freshness

7/24/2026

Usage

5 downloads · 94 views

File structure

📁 scripts/

📄 google_maps_search_api.py

📄 SKILL.md