Amap Smart Route

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only route-planning skill is coherent and clearly uses a user-provided Amap API key to send start/end locations to Amap for route results.

This skill appears safe to install if you trust Amap with the route queries you enter. Configure a dedicated AMAP_API_KEY, be aware that start and destination addresses or coordinates are sent to Amap, and avoid using it for highly sensitive locations.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can use the configured Amap API key for route and geocoding requests, which may consume account quota or be subject to provider billing/rate limits.

Why it was flagged

The skill requires a provider API key, which is expected for an Amap Web Service integration and is declared in the skill metadata.

Skill content
requires:\n      env:\n        - AMAP_API_KEY\n    primaryEnv: AMAP_API_KEY
Recommendation

Use a dedicated Amap Web Service API key with the minimum needed permissions and monitor its usage in the Amap console.

What this means

Addresses and coordinates entered for routing will be sent to Amap’s external API, which may reveal travel intent or location-related information to that provider.

Why it was flagged

The skill discloses that start and destination addresses or coordinates are transmitted for route calculation.

Skill content
仅传输起终点地址/坐标用于路线计算
Recommendation

Avoid entering sensitive locations unless you are comfortable sharing them with Amap under its terms and privacy policy.