Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only Baidu Map RTOS SDK integration skill whose sensitive behaviors are expected for map, search, navigation, and offline-map development.
Before installing, confirm you are authorized to use this Baidu internal SDK material, and treat generated search, routing, navigation, offline-download, and deletion examples as SDK operations that may send location/query data over the network or consume local storage.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Claude Code（本地）
~/.claude/skills/ln -sfn "$(pwd)" ~/.claude/skills/baidu-map-rtos-skills
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Claude Code(本地)
~/.claude/skills/ln -sfn "$(pwd)" ~/.claude/skills/baidu-map-rtos-skills
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Claude Code (local)
~/.claude/skills/ln -sfn "$(pwd)" ~/.claude/skills/baidu-map-rtos-skills
The offline map demo shows starting a city download and notes that an existing package may need deletion before retrying. The markdown does not warn readers that these operations can consume bandwidth/storage and may remove previously downloaded data.
This file presents all operational instructions in Chinese and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. The policy explicitly calls for flagging language or locale constraints when they are forced without user opt-in or clear justification.
This markdown file contains user-facing natural language entries in Chinese, but there is no indication that the skill is intentionally region-specific or that users can opt into this language. Under the language/locale policy rule, forcing a specific language without user choice can be a policy concern.
The primary README is written in Chinese and presents the skill description in that language by default, while English is only offered as a separate linked document. This can be read as a language-default policy choice without explicit user opt-in in the skill’s main entry document.
This markdown file is entirely presented in Chinese and does not indicate any language choice or opt-in for readers. Under the policy rule, forcing a specific language without user opt-in can be a natural-language locale violation.
The skill content appears to force a single language presentation, and there is no indication that the language is optional or that the document is intended only for a Chinese-speaking or region-specific audience. Under the policy, locale or language constraints should be opt-in or explicitly justified.
This markdown file includes examples for POI search and route planning, and the callback comment explicitly mentions an HTTP thread, indicating network requests are made. The surrounding documentation does not warn that search terms, locations, or routing data may be transmitted over the network.
This markdown file consists solely of Chinese-language instructions and examples, with no indication that the user can opt into another language or that the skill is intentionally restricted to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.