baidu map jsapi-ui-kit

百度地图 JavaScript API ui-kit 组件库开发指南。提供地点自动补全（PlaceAutocomplete）、地点检索（PlaceSearch）、地点详情（PlaceDetail）和路径规划（RoutePlan）组件的使用参考。当用户需要：(1) 实现地点搜索输入框自动补全、(2) 在百度地图上实...

Security Scan

This is an instruction-only documentation skill for the Baidu Maps jsapi UI kit; its declared requirements (node and a BMap JS API key) match the documented usage and there is no install or code to run, but the package source/homepage is missing so verify origin before trusting the docs in production.

Purpose & Capability

The skill is documentation for @baidumap/jsapi-ui-kit and the declared requirements (node for npm examples and BMAP_JSAPI_KEY for Baidu JS API calls) align with that purpose. However the skill metadata lacks a homepage or authoritative source; absence of a source repository or homepage reduces ability to verify authenticity.

Instruction Scope

SKILL.md and referenced docs contain usage examples and API explanations only. Instructions reference loading the Baidu Maps JS API and CDN/unpkg URLs for the UI kit — which is expected. There are no instructions to read unrelated local files, exfiltrate data, or contact unexpected endpoints.

Install Mechanism

There is no install spec and no code files; the skill is instruction-only. Risk from installation is low because nothing is downloaded or written by the skill itself.

Credentials

Only one environment variable is required (BMAP_JSAPI_KEY) and it is the primary credential necessary to use Baidu's JS API. Requiring 'node' is reasonable given npm install examples. No unrelated secrets or config paths are requested.

Persistence & Privilege

The skill does not request permanent presence (always is false) and does not modify other skills or agent-wide settings. Autonomous invocation is allowed by default but not combined with other high-risk factors here.

Scan Findings in Context

[no_code_files_to_scan] expected: The static scanner had no code files to analyze because this is an instruction-only skill containing documentation and markdown files; absence of findings is therefore expected but does not guarantee authenticity.

Assessment

This skill appears coherent: it provides documentation and examples for the Baidu Maps jsapi UI kit and only asks for a single Baidu API key and node (for npm examples). Before installing or using it: 1) confirm the skill's origin (official npm package or trusted author) since homepage/source are missing; 2) use a Baidu API key with minimal required permissions and, if possible, a separate key for development/testing; 3) when copying examples into production, verify CDN/package integrity (check npm package name and publisher, or use an official CDN); 4) never paste other unrelated secrets into prompts that use this skill. If you can supply the official package repository or homepage, that would raise confidence to high.

百度地图 jsapi-ui-kit

轻量级百度地图 UI 组件库，提供地点自动补全、地点检索、详情展示和路径规划能力。

什么时候使用

• 希望快速集成标准化的地图 UI 组件，无需从零开发
• 需要在地图应用中添加搜索输入框自动补全功能
• 需要在地图应用中添加地点搜索功能
• 需要展示 POI 详情信息（名称、地址、电话等）
• 需要实现驾车路径规划功能（支持多方案、途经点）

文档导航

• 快速开始 - 安装、引入方式、基础示例
• PlaceAutocomplete 地点自动补全 - 搜索输入框实时建议
• PlaceSearch 地点检索 - 关键字/周边/范围检索
• PlaceDetail 地点详情 - POI 详情展示
• RoutePlan 路径规划 - 驾车路径规划（多方案、途经点、导航调起）

如何使用

根据用户问题查询文档导航，参考详细文档内容和API设计：

references/getting-started.md

每个参考文件包含：

• 功能简要说明
• 完整代码示例及解释
• API 参数说明和注意事项

注意事项

• 必须先加载百度地图 JS API（BMap 或 BMapGL）