google-maps-contact-extract
What this skill does
Extracts business contact details from Google Maps search results and place detail pages, then visits each business website to collect emails, phone numbers, and social media profiles.
github/browser-act - data-exfiltration - 5.3k stars
Threat analysis
Skill info
pkg:github/browser-act/skills@4577dc5?skill=google-maps-contact-extractAssessments (4)
data-exfiltration
data-exfiltration via local-llm-review
scripts/extract-contacts.py
The script extracts emails from mailto links and visible text on business websites, which could be used for unsolicited contact or spamming. This behavior may violate privacy policies and terms of serprivacy-violation
privacy-violation via local-llm-review
scripts/extract-contacts.py
The script collects and processes personal contact information (emails, phone numbers) from business websites without explicit consent from the website owners or users, which may be considered a privaterms-of-service-violation
terms-of-service-violation via local-llm-review
scripts/extract-contacts.py
The script scrapes data from Google Maps and business websites, which may violate the terms of service of Google and the websites being scraped, as they typically prohibit automated data collection wispam-prevention
spam-prevention via local-llm-review
scripts/extract-contacts.py
The script includes a spam filter to avoid extracting emails from domains like 'example.com' or 'google.com', which is a positive measure to prevent spamming.Badge
Add the Anomity scan badge for google-maps-contact-extract to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of google-maps-contact-extract? Report an issue or request a rescan.
