Security audit
Security checks across malware telemetry and agentic risk
This road-trip planning skill is coherent, but its generated map artifacts can expose precise itinerary details to third-party map providers, including Baidu links over plain HTTP.
Review before installing if your itineraries include private lodging, home addresses, medical constraints, or sensitive travel dates. Use generalized public place names where possible, avoid putting private details in generated HTML, and change or remove Baidu HTTP links before sharing or relying on the map artifact.
output: "html",
src: BAIDU_SOURCE
});
return `http://api.map.baidu.com/geocoder?${params}`;
}
const params = new URLSearchParams({
location: `${stop.lat},${stop.lng}`,output: "html",
src: BAIDU_SOURCE
});
return `http://api.map.baidu.com/marker?${params}`;
}
function baiduRoutePoint(stop) {output: "html",
src: BAIDU_SOURCE
});
return `http://api.map.baidu.com/direction?${params}`;
}
function mapLinksForStop(stop) {output: "html",
src: BAIDU_SOURCE
});
return `http://api.map.baidu.com/geocoder?${params}`;
}
const params = new URLSearchParams({
location: `${stop.lat},${stop.lng}`,output: "html",
src: BAIDU_SOURCE
});
return `http://api.map.baidu.com/marker?${params}`;
}
function baiduRoutePoint(stop) {output: "html",
src: BAIDU_SOURCE
});
return `http://api.map.baidu.com/direction?${params}`;
}
function mapLinksForStop(stop) {64/64 vendors flagged this skill as clean.
Detected: suspicious.dynamic_code_execution