baidu-maps-poi-ai-search
v1.0.0Search and get details for POI (points of interest) using Baidu Maps API. Use for searching places, restaurants, hotels, attractions, and retrieving detailed...
⭐ 1· 62·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'Baidu Maps POI search' and the skill requires BAIDU_AK and python3 and calls Baidu's place API endpoint. The requested env var (BAIDU_AK) is appropriate for the claimed purpose.
Instruction Scope
SKILL.md instructs calling the included Python script with a JSON payload. The script only reads the provided params and the BAIDU_AK (or 'ak' param) and sends requests to Baidu's API. It does not access unrelated files, secrets, or external endpoints beyond Baidu.
Install Mechanism
There is no install spec (instruction-only), but a Python script is included that imports the 'requests' library. The metadata requires python3 but does not declare the Python dependency (requests). Users will need to ensure 'requests' is available; the skill does not provide or install it.
Credentials
Only BAIDU_AK is required. That credential is directly needed to call Baidu's API; no unrelated credentials or sensitive paths are requested.
Persistence & Privilege
always is false and the skill does not attempt to modify agent/system configuration or persist credentials. It operates only when invoked.
Assessment
This skill appears to be what it claims: a Baidu Maps POI search helper. Before installing: 1) Ensure you supply a valid BAIDU_AK (the script will use the BAIDU_AK env var or an 'ak' field in the JSON call). Treat that key like any API credential — only give it to skills you trust. 2) The included Python script requires the 'requests' package; the skill does not install dependencies. 3) The script issues network calls to api.map.baidu.com (so the agent will contact Baidu when used). If you permit autonomous invocation, the agent could call the API (consuming quota and sending search queries). 4) Note minor implementation issues: the script prints parsed input to stderr (may appear in logs), and the output uses len() on a returned dict (may make the 'total' field misleading). If those are acceptable, the skill is coherent and reasonable to use.Like a lobster shell, security has layers — review code before you run it.
latestvk97dw1nsnhbpzwtycp1v9j885s83tw14
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📍 Clawdis
Binspython3
EnvBAIDU_AK