Baidu Map WebAPI（百度地图官方Web服务 SKills）
v1.0.7百度地图 webapi 开发指南。在编写、审查或调试使用百度地图webAPI的代码时应运用此技能，也适用于直接调用百度地图API获取结果的场景。涵盖：地图位置搜索、POI检索、路线规划、建议出发时间、路线耗时预测、实时路况、行政区划查询、地址坐标转换、沿途交通事件、天气查询、智能推荐上车点等。当用户提及出发时间、...
⭐ 1· 186·0 current·0 all-time
bybaidu-maps@lbs-bmap
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the declared requirements. The skill only requires curl and a single AK environment variable (BMAP_WEBAPI_AK), which are appropriate for making HTTP calls to Baidu Map WebAPI endpoints. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md is a documentation/instruction-only guide that describes which Baidu endpoints and API calls to use for each scenario. It instructs the agent to use the AK from BMAP_WEBAPI_AK and provides curl examples and official data-file URLs. The instructions do not ask the agent to read arbitrary local files, system secrets, or exfiltrate data to unexpected endpoints; external downloads referenced are static CSV/XLS resources hosted on Baidu domains and are relevant to the described features.
Install Mechanism
No install spec or code files are included—this is instruction-only. That minimizes disk writes or third-party code execution risk.
Credentials
The skill requires a single credential (BMAP_WEBAPI_AK) which is the expected API key for Baidu Map WebAPI. No other secrets or unrelated environment variables are requested. The SKILL.md explicitly instructs reading the AK from BMAP_WEBAPI_AK and shows curl examples using that variable.
Persistence & Privilege
always:false (good). The skill is documented to 'automatically trigger' when user mentions navigation/route/time queries; autonomous invocation (disable-model-invocation:false) is the platform default and not itself a problem. Users should be aware the skill may be invoked by the agent in those contexts, and the SKILL.md also documents a separate 'advanced/demo' endpoint for model-driven experience (still requiring AK).
Assessment
This skill appears to be a straightforward, documentation-only integration with Baidu Map WebAPI. Before installing: (1) Ensure you only provide an AK that has the minimal permissions needed (use a server-side key and restrict it by IP/referrer in Baidu control panel if possible). (2) For production code generation, use the standard endpoint (https://api.map.baidu.com/) as recommended; the skill documents a separate 'experience' endpoint for demos—avoid using that in production. (3) The skill will read the environment variable BMAP_WEBAPI_AK at runtime—do not put broad or unrelated credentials into that variable. (4) Because the skill can be invoked automatically when the agent detects route/POI/weather intents, review agent invocation policies if you need tighter control over autonomous calls. Overall the resource requests and instructions align with the stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk977a1myhahxgzbzxjamkdmt6n84dssv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl
EnvBMAP_WEBAPI_AK
Primary envBMAP_WEBAPI_AK