ClawHub

MapV Three（百度地图官方3D地图SKills）

v1.0.1

使用 MapV-Three 构建专业的 3D 地图和 GIS 应用 - 基于 Z-up 坐标系的 3D 地图库，支持地图编辑、测量工具、要素绘制、数据管理等地理可视化功能。适用于创建地图编辑器、测量工具、空间数据可视化等 Web-GIS 应用。

⭐ 1· 96·0 current·0 all-time
bybaidu-maps@lbs-bmap·duplicate of @wahddbing/bmap-jsapi-three
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description describe a MapV-Three 3D mapping docset; the SKILL.md and many reference files are consistent with that purpose. The single required env var (BMAP_JSAPI_KEY) is expected for Baidu Maps JS API usage.
✓
Instruction Scope
SKILL.md and referenced files contain usage examples and API/docs for MapV-Three (initialization, loading tiles/models, editing, trackers, etc.). The instructions do not direct the agent to read unrelated local files, harvest arbitrary environment variables, or exfiltrate data to unknown endpoints — external URLs shown are example endpoints for data/tiles (e.g., example.com, your-api-host) and are typical in documentation.
✓
Install Mechanism
No install spec and no code files to execute — this is instruction-only documentation. That means nothing will be downloaded or written by an installer as part of the skill itself.
✓
Credentials
Only BMAP_JSAPI_KEY is declared and used in the docs (e.g., mapvthree.BaiduMapConfig.ak). Requesting a single Baidu API key is proportionate for a mapping/GIS integration. There are no other unrelated credentials requested.
✓
Persistence & Privilege
Skill is not forced-always, model invocation is allowed (default) and user-invocable — normal for skills. There is no attempt in the docs to modify other skills or system-wide configs.
Assessment
This skill is a documentation-only helper for the MapV-Three library and appears internally consistent. Before installing: (1) confirm you trust the skill owner (source/homepage is missing), (2) avoid placing a sensitive server-side Baidu key in the skill environment — prefer a browser-restricted JS/API key with referrer restrictions, (3) if you plan to use backend endpoints shown in examples (apiHost, tiles URLs), verify those endpoints and do not point them to private production services without review, and (4) if you need stronger assurance, ask the publisher for provenance or a link to the official MapV-Three repo/homepage. Overall risk is low because the skill contains only docs, but treat the BMAP_JSAPI_KEY like any API credential and restrict its scope/usage.

Like a lobster shell, security has layers — review code before you run it.

latestvk9726yv56ykafexkb83envveps845k13

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvBMAP_JSAPI_KEY
Primary envBMAP_JSAPI_KEY

Comments