Roadbook Csv 1.0.0

通过 CSV 格式提交旅行线路数据，自动生成路书分享链接。数据存储在 Redis，支持多日行程、酒店住宿跨天衔接、高德地图可视化。

Security Scan

The skill's requests and runtime instructions align with its description: it needs a single API key and curl to POST CSV travel data to the Cyeam API and return a shareable link; nothing in the package suggests unrelated access or unexpected behavior, though a few metadata inconsistencies reduce confidence.

Purpose & Capability

The skill's stated purpose is submitting CSV travel data to an API to generate a roadbook link. The required binary (curl) and one required environment variable (CYEAM_API_KEY) declared in SKILL.md are appropriate and necessary for that purpose.

Instruction Scope

SKILL.md instructs the agent to check CYEAM_API_KEY, format CSV text, and call a specific POST endpoint with curl. The instructions only reference the declared env var and the specified external endpoints. They do send user-provided CSV data to an external service and note that data is stored in Redis for 30 days (privacy consideration) — this is consistent with the stated functionality.

Install Mechanism

This is an instruction-only skill with no install spec or code files, so nothing is written to disk or downloaded by the skill itself. That is the lowest-risk install model and consistent with the content.

Credentials

Only a single API key (CYEAM_API_KEY) is required and it's justified by the need to authenticate to the Cyeam API. No unrelated credentials or config paths are requested. Note: the top-level 'Requirements' summary shows a serialization artifact ('[object Object]') instead of the env var list, which is a metadata bug but not a functional mismatch.

Persistence & Privilege

The skill does not request persistent privileges (always=false) and does not modify other skills or system-wide settings. Autonomous invocation is allowed (default) but not combined with elevated privileges or extra credentials.

Assessment

This skill appears to do what it says: it formats user-provided CSV and POSTs it to the Cyeam API using the CYEAM_API_KEY. Before installing or using it, consider: (1) Privacy — the CSV you submit (addresses, names, notes) is sent to external hosts and stored for ~30 days in Redis; avoid submitting sensitive personal data. (2) Verify endpoints and operator — SKILL.md posts to a zuplo.dev gateway and returns links on cyeam.com; while the doc explains the gateway usage, confirm you trust the service before sending real data. (3) Metadata quirks — the package metadata shows a different ownerId/version and a small serialization bug ('[object Object]') in the top-level Requirements; this is likely a packaging/metadata error but you may want to verify the publisher if provenance matters. (4) Test with non-sensitive sample data and a throwaway API key first.

Roadbook CSV - 旅行线路 CSV 提交工具

通过 CSV 文本提交旅行线路地点数据，自动生成路书分享 ID 和链接，可在高德地图上查看完整行程。

使用流程

1. 检查环境变量 CYEAM_API_KEY

   • 如果未设置：提示用户先设置环境变量（见下方「申请 API Key」）
   • 如果已设置：直接整理 CSV 并调用 API

2. 整理 CSV 数据（5 列，见下方格式说明）

3. 调用 API 生成路书

4. 返回路书链接和二维码

CSV 格式

每行一个地点，逗号分隔，共 5 列：

名称,地址,类型,日期,备注

列	说明	示例
名称	地点名称	中国陶瓷琉璃馆
地址	详细地址	淄博市张店区华光路320号
类型	景点/餐饮/住宿/起点/其他	景点
日期	DayX 或 日期	Day1 / 5.1
备注	行程备注	下午 / 早市逛吃

完整示例

淄博酒店,淄博市张店区某路,住宿,4.30,入住
八大局便民市场,淄博市张店区共青团东路,餐饮,5.1,早市逛吃
中国陶瓷琉璃馆,淄博市张店区华光路320号,景点,5.1,国家级免费
海岱楼钟书阁,淄博市张店区齐盛湖公园内,景点,5.1,夜景打卡
牧羊村烧烤,淄博市张店区林泽街,餐饮,5.1,晚餐

日期与备注格式

• Day1,下午 → 第一天，备注"下午"
• 5.1,早市逛吃 → 5月1日，备注"早市逛吃"
• Day2, → 第二天，无备注（备注列留空）

注意：如果前一天最后一个地点的类型是"住宿"，系统会自动将其作为第二天的起点展示在地图和行程列表中。

调用接口

提交 CSV 生成路书

端点： https://cyeam-open-main-d02895c.d2.zuplo.dev/api/roadbook/csv

认证： Authorization: Bearer $CYEAM_API_KEY

curl -X POST "https://cyeam-open-main-d02895c.d2.zuplo.dev/api/roadbook/csv" \
  -H "Authorization: Bearer $CYEAM_API_KEY" \
  -H "Content-Type: text/plain" \
  -d "名称,地址,类型,日期,备注"

为什么使用这两个域名？ 写入端点（zuplo.dev）是 Cyeam 开放平台的 API 网关，负责接收 CSV 数据并生成分享 ID；读取端点（cyeam.com）是前端展示页面，用户通过该链接查看地图路书。两者都是 Cyeam 官方服务的一部分。

返回：

{
  "id": "bf9186906ec8",
  "url": "https://www.cyeam.com/tool/roadbook?id=bf9186906ec8",
  "text": "https://www.cyeam.com/tool/roadbook?id=bf9186906ec8",
  "qrcode": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAA..."
}

字段	说明
id	分享 ID
url	路书页面链接
text	要编码为二维码的文本内容（通常与 url 相同）
qrcode	Base64 编码的 PNG 二维码图片

获取已分享的路书数据

端点： https://www.cyeam.com/api/roadbook/get?id={id}

无需认证

curl -s "https://www.cyeam.com/api/roadbook/get?id=bf9186906ec8"

返回：

{
  "data": "[{...地点数据JSON数组...}]"
}

使用场景

为用户规划旅行路线

当用户给出旅行计划时，整理成 CSV 格式调用接口：

> 用户：帮我规划一个淄博两日游，第一天住淄博酒店，第二天去八大局吃早点，然后参观陶瓷琉璃馆，晚上吃烧烤。

> 助手：（检查 CYEAM_API_KEY 后，整理为 CSV 调用接口）
curl -X POST "https://cyeam-open-main-d02895c.d2.zuplo.dev/api/roadbook/csv" \
  -H "Authorization: Bearer $CYEAM_API_KEY" \
  -H "Content-Type: text/plain" \
  -d "淄博酒店,淄博市张店区华光路,住宿,Day1,入住
八大局便民市场,淄博市张店区共青团东路,餐饮,Day2,早市逛吃
中国陶瓷琉璃馆,淄博市张店区华光路320号,景点,Day2,下午参观
牧羊村烧烤,淄博市张店区林泽街,餐饮,Day2,晚餐"

> 助手：路书已生成，点击链接查看完整行程地图：https://www.cyeam.com/tool/roadbook?id=xxx

申请 API Key

如环境变量 CYEAM_API_KEY 未设置，或调用返回 401，需先申请：

1. 访问 Cyeam 开放平台
2. 点击右上角 Sign In 登录/注册
3. 进入 Developer Portal 创建 API Key
4. 设置环境变量：export CYEAM_API_KEY="YOUR_API_KEY"

注意事项

• 接口接收 text/plain 格式的 CSV 文本（不是 multipart/form-data）
• 数据存储在 Redis，默认有效期 30 天
• 返回的链接打开后，前端会自动进行地理编码并在高德地图上展示
• 支持覆盖已有分享（在 URL 中加 ?id=已有ID）
• 创建端点域名为 cyeam-open-main-d02895c.d2.zuplo.dev，读取端点域名为 www.cyeam.com，请勿修改
• 如果 API 调用返回非 200 状态码（如 401/403/404/500），向用户报告具体错误信息，不再重试