高德SKILL 美食雷达

• Risk level: Low
• Analyzed: Apr 15, 2026, 11:57 AM
• Findings: 0
• Version: 1.0.2

Overview

The skill's requirements and instructions are coherent with its stated purpose: it needs a single AMAP_API_KEY and integration with the AMap MCP server to perform nearby POI searches; nothing requested appears unrelated to providing restaurant recommendations.

This skill appears to do what it says: it needs your AMap API key and the @amap/mcp-server MCP integration to search POIs. Before installing/configuring: 1) Verify the AMAP API key only has the permissions you expect and store it securely in your assistant's config; be prepared to rotate it if exposed. 2) Inspect the @amap/mcp-server npm package (version, publisher, repository) before allowing npx to fetch/run it, since npx will download and execute remote code. 3) Consider running the MCP server in a restricted environment (container) if you are cautious about third-party code. 4) Review AMap's privacy/docs so you understand what location data will be sent to AMap when the skill requests nearby POIs.