Is goplaces safe to install?

SaferSkills independently audited goplaces (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/integrations/goplaces/SKILL.md · 1 file

skills/integrations/goplaces/SKILL.md1.5 KB · Markdown

name: goplaces

description: Query Google Places API (New) via the goplaces CLI for text search, place details, resolve, and reviews. Use for human-friendly place lookup or JSON output for scripts.

homepage: https://github.com/steipete/goplaces

metadata:

{

"openclaw":

{

"emoji": "📍",

"requires": { "bins": ["goplaces"], "env": ["GOOGLE_PLACES_API_KEY"] },

"primaryEnv": "GOOGLE_PLACES_API_KEY",

"install":

[

{

"id": "brew",

"kind": "brew",

"formula": "steipete/tap/goplaces",

"bins": ["goplaces"],

"label": "Install goplaces (brew)",

}

goplaces

Modern Google Places API (New) CLI. Human output by default, --json for scripts.

Install

Homebrew: brew install steipete/tap/goplaces

Config

GOOGLE_PLACES_API_KEY required.
Optional: GOOGLE_PLACES_BASE_URL for testing/proxying.

Common commands

Search: goplaces search "coffee" --open-now --min-rating 4 --limit 5
Bias: goplaces search "pizza" --lat 40.8 --lng -73.9 --radius-m 3000
Pagination: goplaces search "pizza" --page-token "NEXT_PAGE_TOKEN"
Resolve: goplaces resolve "Soho, London" --limit 5
Details: goplaces details <place_id> --reviews
JSON: goplaces search "sushi" --json

Notes

--no-color or NO_COLOR disables ANSI color.
Price levels: 0..4 (free → very expensive).
Type filter sends only the first --type value (API accepts one).

goplaces— agent skill

Is goplaces safe to install?

goplaces

Audit the pieces. Scan the whole. Decide.