.Gaodemapskill.Conflict

A skill to interact with Gaode Map (AMap) for location search and route planning.

Security Scan

The skill's code, runtime instructions, and environment requirements are consistent with a simple Gaode/AMap client for place search and route planning.

Purpose & Capability

The name/description, required binary (python), and required env var (AMAP_API_KEY) align with a mapping client. The included amap_tool.py implements place search, geocoding, and route planning against AMap REST endpoints. Minor note: the _meta.json ownerId differs from the registry ownerId in the provided metadata — likely a packaging/metadata mismatch but not directly harmful to functionality.

Instruction Scope

SKILL.md instructs only to run the provided Python script with parameters. The script reads the AMAP_API_KEY (or --key), calls AMap REST APIs (restapi.amap.com), and prints JSON results. It does not read other environment variables, system files, or forward data to unexpected endpoints.

Install Mechanism

No install spec is provided (instruction-only skill) and the repository only includes a small Python script and requirements.txt (requests). There are no downloads from arbitrary URLs or archive extraction steps. Dependency on the 'requests' package is expected and low risk.

Credentials

Only AMAP_API_KEY is required, which is appropriate for calling AMap APIs. No other credentials, tokens, or secrets are requested. As best practice, the API key should be scoped/restricted (map-only, restrict referrers or IPs) before use.

Persistence & Privilege

always is false and the skill does not request elevated or persistent system privileges. It does not modify other skills or system-wide settings. Default autonomous invocation is allowed (platform default) but not combined here with any broad credential access.

Scan Findings in Context

[pre_scan_injection] expected: Static pre-scan reported no injection signals. For a simple HTTP client script, absence of findings is expected.

Assessment

This skill appears to do what it claims: call AMap APIs for searches and routing. Before installing: 1) Confirm the skill owner and source (the _meta.json ownerId differs from the registry ownerId in the package metadata). 2) Only provide an AMAP_API_KEY that is limited to map services and use referrer/IP restrictions if possible. 3) Review the included amap_tool.py yourself or run it in an isolated environment if you have any doubt. 4) Ensure your environment has Python and the 'requests' package installed. If you need stricter controls, avoid granting a general-purpose or high-privilege API key.

Gaode Map Skill

This skill allows you to search for places and plan routes using Gaode Map (AMap) API.

Usage

You can use the amap_tool.py script to perform actions. The API Key is expected to be in the AMAP_API_KEY environment variable.

Place Search

Search for POIs (Points of Interest).

Command:

python amap_tool.py search --keywords "<keywords>" [--city "<city>"]

Parameters:

• keywords: The search query (e.g., "restaurants", "gas station").
• city: (Optional) The city to search in.

Route Planning

Plan a route between two locations.

Command:

python amap_tool.py route --origin "<origin>" --destination "<destination>" [--mode "<mode>"] [--city "<city>"]

Parameters:

• origin: Start location (address or coordinates "lon,lat").
• destination: End location (address or coordinates "lon,lat").
• mode: (Optional) Route mode: driving (default), walking, bicycling, transit.
• city: (Optional) City name (required for transit mode, or to help geocoding).

Examples

User: "Find coffee shops in Shanghai." Action:

python amap_tool.py search --keywords "coffee shop" --city "Shanghai"

User: "Show me the driving route from Beijing West Station to the Forbidden City." Action:

python amap_tool.py route --origin "Beijing West Station" --destination "Forbidden City" --mode "driving" --city "Beijing"