Amap Dinner Planner
PassAudited by ClawScan on Apr 15, 2026.
Overview
The skill's requested credential and runtime actions match its stated purpose (using Amap web APIs to compute a midpoint, search POIs, and generate a personal-map QR); the main caution is that location data is sent to Amap and the generated personal-map resource may be persisted on Amap's servers, which the skill's privacy statement does not fully prove or guarantee.
This skill appears to do what it says: it will send the addresses you provide to Amap Web Service endpoints and requires an AMAP_API_KEY. Before installing/use: (1) be aware any addresses you input will be transmitted to Amap and the generated personal-map resource (QR) may be created/stored on Amap's servers and potentially shared; (2) avoid entering highly sensitive home addresses or private information you wouldn't want on a third-party mapping service; (3) limit the API key permissions and rotate/revoke it if you see unexpected activity; (4) review Amap's privacy/terms for how personal-map resources are handled; (5) if you need stronger guarantees (no server-side persistence), ask the skill author for an explicit statement or implementation detail showing ephemeral-only API usage. Additional information that would raise confidence: a sample of the exact HTTP requests used (so we can confirm query parameters and whether created personal-map resources are ephemeral) or evidence that created map resources are explicitly set to ephemeral/auto-deleted.
