Security audit
Security checks for vulnerabilities and agentic risk
This map-memory skill is coherent and purpose-aligned, but users should treat entered locations and exported GeoJSON as sensitive because location data is sent to Amap APIs.
Install only if you are comfortable sending place names, addresses, coordinates, and related map queries to Amap. Avoid entering highly sensitive memories or unnecessary personal details, and review GeoJSON exports before sharing because they may contain precise coordinates, dates, and story text.
The export/share feature encourages generating and sharing structured GeoJSON memory maps without warning that these files can reveal highly sensitive location history, routines, and personal associations. Exporting precise coordinates and story metadata increases downstream privacy risk if files are shared, stored insecurely, or exposed unintentionally.
The skill description highlights convenience features but does not clearly warn, at the point of use, that personal memory locations and stories may be transformed into queries sent to an external mapping provider. Users may reasonably believe they are just chatting locally, when in fact their sensitive location history is being shared with a third party for processing.
The skill invites unrestricted natural-language submission of memories without guardrails, encouraging users to provide arbitrary personal narratives that may contain precise locations, dates, companions, and other sensitive details. Because the skill then extracts place data for external API calls, broad activation increases the chance of oversharing and unintentional disclosure of sensitive personal information.
The privacy section says memory data is only processed locally and not uploaded to any external server, but the skill elsewhere explicitly states it sends address/location data to Amap Web Service APIs over HTTP requests. This is a material disclosure inconsistency that can mislead users into sharing sensitive location-history and personal-story data under false assumptions about where their data goes.
No suspicious patterns detected.
