Amap Maps StreamableHTTP
v0.1.1Auto-generated skill for amap-maps-streamableHTTP tools via OneKey Gateway.
⭐ 0· 86·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name, description, and Python scripts all align: they call OneKeyAgentRouter to perform map operations. Minor inconsistencies: registry metadata lists no required env vars while SKILL.md and all scripts require DEEPNLP_ONEKEY_ROUTER_ACCESS; SKILL.md also lists an npm dependency (@aiagenta2z/onekey-gateway) that is not used by the included Python scripts.
Instruction Scope
The runtime instructions and scripts only read input payloads (from CLI or file), validate required fields, read DEEPNLP_ONEKEY_ROUTER_ACCESS (with a demo fallback), and invoke OneKeyAgentRouter. This is within the stated purpose, but it does transmit whatever payload you provide to an external OneKey Gateway endpoint — sensitive data in requests would be sent off-host.
Install Mechanism
There is no aggressive install spec in the registry (instruction-only skill), and requirements.txt only references ai-agent-marketplace. SKILL.md suggests pip install and an npm -g install; the npm package appears unnecessary given the Python scripts. No downloads from arbitrary URLs or extracted archives are present.
Credentials
The only credential the skill needs is DEEPNLP_ONEKEY_ROUTER_ACCESS, which is appropriate for a gateway client. Scripts provide a demo fallback key if you don't set one. The mismatch between the manifest's 'Required env vars: none' and SKILL.md's required env var is worth noting.
Persistence & Privilege
The skill does not request permanent (always:true) inclusion, does not modify other skills or system configuration, and does not persist credentials on its own—normal behavior for an instruction-only wrapper.
Assessment
This package is essentially a thin client that forwards mapping requests to the OneKey Gateway using the DEEPNLP_ONEKEY_ROUTER_ACCESS key. Before installing, decide whether you trust the OneKey Gateway operator to handle your data: any payload you send (including coordinates, IPs, or other info) will go to that external service. Also note minor inconsistencies: the registry metadata says no env vars but SKILL.md and the scripts require DEEPNLP_ONEKEY_ROUTER_ACCESS, and SKILL.md lists an npm dependency that the Python scripts don't use. If you plan to use a real API key, restrict its scope if possible, verify the ai-agent-marketplace package provenance (PyPI project and maintainers), and avoid sending sensitive PII in requests to this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97bgeq7ger7y9dx1m04p7vs3h83dsyg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.