Baidu Map JSAPI UI Kit（百度地图官方 JSAPI UI-Kit SKills）
v1.0.4百度地图官方 UI 交互组件，提供地点自动补全（PlaceAutocomplete）、地点检索（PlaceSearch）、地点详情（PlaceDetail）和路径规划（RoutePlan）组件的使用参考，快速实现地图界面，大幅提升开发效率。
⭐ 0· 74·0 current·0 all-time
bybaidu-maps@lbs-bmap
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is a documentation/instruction bundle for Baidu Map JSAPI UI components and declares a single env var BMAP_JSAPI_KEY (the JS API key/ak). That credential is directly relevant to using the Baidu Maps JS API described in the docs.
Instruction Scope
SKILL.md and the reference files only describe how to include the Baidu Maps JS API and the UI components, show example usage, and reference CDN/npm assets (api.map.baidu.com, unpkg.com). The instructions do not ask the agent to read unrelated files, access other credentials, or exfiltrate data.
Install Mechanism
This is instruction-only (no install spec, no code). Examples reference installing via npm or loading from CDN (unpkg). Loading remote JS/CSS from CDNs is expected for a web UI kit but carries the usual supply-chain risks — however no installer or arbitrary download URL is included in the skill itself.
Credentials
Only one environment variable is required (BMAP_JSAPI_KEY) and it is the expected credential for Baidu Maps JS API usage. No other secrets or unrelated env vars are requested.
Persistence & Privilege
Skill does not request always:true or any special persistent privileges; it is user-invocable and can be invoked autonomously (platform default), which is normal. The skill contains only docs and does not modify other skills or system settings.
Assessment
This skill appears to be documentation for Baidu Map JS UI components and asks only for your Baidu JS API key (BMAP_JSAPI_KEY), which is appropriate. Before installing or using it: (1) verify the package source/repository or homepage outside the skill (the skill metadata lacks a homepage/source URL) to ensure you are getting the official library; (2) avoid pasting your API key into public examples — keep it in a safe config and restrict its usage in Baidu console if possible; (3) prefer installing from an official npm scope or Baidu-hosted source and, if using CDN assets (unpkg/api.map.baidu.com), consider integrity checks (SRI) or pinned versions; (4) if you need higher assurance, request the skill author/publisher details or a link to the upstream repository to confirm authenticity.Like a lobster shell, security has layers — review code before you run it.
latestvk97fakjbsjd2024j7hgpsx529d84c5m6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvBMAP_JSAPI_KEY
Primary envBMAP_JSAPI_KEY