腾讯地图api调用技能

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: 2995384a84f632c4595ed019e031e9dd6853b64dd72e1926de1aad11c98ce3ea
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for Tencent Map API is benign. It correctly declares its dependencies on `curl` and `python3` and requires the `TENCENT_MAP_KEY` environment variable, which it accesses securely. The `scripts/tencent_map.sh` script makes legitimate `curl` requests to the official Tencent Map API (`https://apis.map.qq.com/ws`) and pipes the responses to `python3` for local JSON parsing and formatting. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in any of the files, including SKILL.md and README.md.