Baidu Map JSAPI UI Kit

百度地图 JavaScript API ui-kit 组件库开发指南。提供地点自动补全（PlaceAutocomplete）、地点检索（PlaceSearch）、地点详情（PlaceDetail）和路径规划（RoutePlan）组件的使用参考。当用户需要：(1) 实现地点搜索输入框自动补全、(2) 在百度地图上实...

Security Scan

Documentation-only Baidu Maps UI Kit skill is mostly coherent with its purpose, but requesting the 'node' binary (while being instruction-only) is an unnecessary mismatch and worth asking about before installing.

Purpose & Capability

The skill is documentation and examples for a browser JS UI kit and only needs a Baidu Maps API key; declaring 'node' as a required binary is incongruent with the stated purpose (no build/install steps in SKILL.md require Node). This may be benign (e.g., examples use npm) but is an unexplained requirement.

Instruction Scope

SKILL.md and reference files are documentation-only and confined to usage examples, component APIs, and loading Baidu Map JS API/CDN endpoints. They do not instruct the agent to read unrelated files, access other credentials, or send data to unexpected endpoints.

Install Mechanism

There is no install spec and no code to write to disk (instruction-only). This is the lowest-risk install mechanism.

Credentials

The only required environment variable is BMAP_JSAPI_KEY, which aligns with a JavaScript map UI kit that needs a Baidu Maps API key. The documentation examples show using an 'ak' (API key) in script tags; no unrelated secrets are requested.

Persistence & Privilege

Skill does not request always:true or any elevated persistence. It is user-invocable and permits autonomous invocation by default (platform normal), which is not combined with other red flags.

What to consider before installing

This skill appears to be documentation for the @baidumap/jsapi-ui-kit and legitimately needs a Baidu Maps API key. Before installing: (1) ask why 'node' is listed as a required binary — the docs are browser-side and don't need Node at runtime; (2) confirm how your BMAP_JSAPI_KEY will be used and stored (examples use client-side script tags with an 'ak' — be aware client-side keys can be exposed and should have proper referrer restrictions); (3) if you will supply a key to the skill, prefer a key scoped/restricted for browser usage and avoid sharing any high-privilege server keys. If the skill later includes code or an installer, re-evaluate for network endpoints or file-access instructions that might exfiltrate credentials.

百度地图 jsapi-ui-kit

轻量级百度地图 UI 组件库，提供地点自动补全、地点检索、详情展示和路径规划能力。

什么时候使用

• 希望快速集成标准化的地图 UI 组件，无需从零开发
• 需要在地图应用中添加搜索输入框自动补全功能
• 需要在地图应用中添加地点搜索功能
• 需要展示 POI 详情信息（名称、地址、电话等）
• 需要实现驾车路径规划功能（支持多方案、途经点）

文档导航

• 快速开始 - 安装、引入方式、基础示例
• PlaceAutocomplete 地点自动补全 - 搜索输入框实时建议
• PlaceSearch 地点检索 - 关键字/周边/范围检索
• PlaceDetail 地点详情 - POI 详情展示
• RoutePlan 路径规划 - 驾车路径规划（多方案、途经点、导航调起）

如何使用

根据用户问题查询文档导航，参考详细文档内容和API设计：

references/getting-started.md

每个参考文件包含：

• 功能简要说明
• 完整代码示例及解释
• API 参数说明和注意事项

注意事项

• 必须先加载百度地图 JS API（BMap 或 BMapGL）