SmartRoute - Google Routes Calculator

Calculate traffic-aware routes, travel times, and distances between locations using Google Routes API. Use when the user asks for "traffic to X", "how long to get to Y", "best route to Z", or "drive time". Returns JSON with duration, distance, and a direct Google Maps navigation link.

This skill appears coherent and implements only the documented Google Routes API calls, but consider the following before installing: - Provide a dedicated Google API key with the Routes API enabled and restrict that key (by referrer, IP, or API restrictions) to limit blast radius and accidental billing. - The script prints the origin/destination (PII) to stdout; avoid using sensitive addresses if you need privacy. - Keep the API key in a secure environment variable (as recommended) and avoid passing it on the CLI to prevent exposure in process lists. - Review and test the script in your environment (it has a small parsing assumption for duration) before trusting it in production. - If you allow autonomous agent invocation, monitor usage and billing (autonomous calls can consume quota).

Type: OpenClaw Skill Name: smart-route Version: 1.0.4 The skill bundle is benign. The `SKILL.md` clearly outlines the skill's purpose, required environment variables, and security considerations, without any prompt injection attempts against the agent. The `get_route.js` script correctly implements the described functionality, reading the `GOOGLE_ROUTES_API_KEY` from environment variables and making HTTPS requests to `routes.googleapis.com`. User inputs are safely parsed from `process.argv` and embedded into a JSON request body, preventing direct shell injection within the script. There is no evidence of data exfiltration beyond the stated purpose, unauthorized execution, or other malicious behaviors.