Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Baidu Maps integration that sends map and routing requests to Baidu and uses a user-provided token, with one usability caution around optional browser opening.
Install this only if you are comfortable sending map queries, addresses, coordinates, and your Baidu Maps authorization token to Baidu's map APIs. Be aware that map visualization may open a browser window by default when you ask to see results on a map.
The natural-language instructions and examples are presented exclusively in Chinese, which effectively forces a specific language for use of the skill. The file does not offer an alternative language, user opt-in, or a documented justification that this is a China-specific or Chinese-only skill.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
# 百度地图服务 Agent Plan
提供大模型友好调用的地图工具skills/baidu-ai-map/SKILL.md，支持语义化 AI 搜索、语义化 AI 路线规划、地理编码与逆地理编码、天气查询。
## 使用准则
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
所有能力统一使用：
> **Base URL**: `https://api.map.baidu.com/`
### 准则 2：SK 凭证安全处理
The MapRender section explicitly instructs the agent to automatically launch an external browser via open, xdg-open, or start. This creates a side-effecting action outside the chat/runtime boundary and can surprise users or be abused to trigger unwanted application launches or external navigation without an explicit confirmation step at execution time.
No suspicious patterns detected.