tmap-lbs-skill
v1.1.1腾讯地图位置服务，支持POI搜索、路径规划、旅游规划、周边搜索，轨迹数据可视化和地图数据可视化
⭐ 0· 276·0 current·0 all-time
bytencent map@vajrabodhi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Tencent Maps LBS: POI, routing, travel, trail visualizations) aligns with the declared requirement of the tmap-lbs binary and a Tencent Web Service Key (TMAP_WEBSERVICE_KEY). The install entry provides a Node package that creates the expected tmap-lbs binary, which matches the skill purpose.
Instruction Scope
SKILL.md contains only instructions to run the tmap-lbs CLI, to check/set an API key, and to build map/visualization links. It references local documentation files in the package (references/...) for precise command usage. It does not instruct reading arbitrary system files, other environment variables, or sending data to unexpected endpoints beyond the Tencent map endpoints and user-supplied data URLs used for visualization.
Install Mechanism
Installation uses npm to install @tencent-map/lbs-skills and create a tmap-lbs binary. npm packages execute code at install time and will write files to disk (global -g install modifies system global node_modules/bin). This is expected for a CLI, but you should verify the npm package publisher and contents before granting install rights.
Credentials
Only TMAP_WEBSERVICE_KEY is required and declared as the primary credential, which is appropriate for a web-service-based mapping skill. The docs instruct not to print the key and offer a CLI method to set it. No unrelated credentials or config paths are requested.
Persistence & Privilege
The skill is not forced-always (always:false) and does not request system-wide privileges beyond installing a CLI. The install will place a binary on disk (normal for a CLI) but the skill does not request to modify other skills or system-wide agent settings.
Assessment
This skill appears coherent with its stated purpose, but take these precautions before installing: 1) Verify the npm package (@tencent-map/lbs-skills) is the official/trusted package on the npm registry (check publisher, package files, and recent versions) because npm installs can run arbitrary code at install time. 2) Prefer to review the package source or install it in a sandbox/container if you are unsure. 3) Keep your TMAP_WEBSERVICE_KEY secret and consider using a key with limited quota/permissions; the skill only needs that single key. 4) The CLI will construct links that include user-supplied data URLs (for trail/visualization); only provide data URLs you trust. 5) If you want extra safety, set the API key as a short-lived environment variable in the session rather than storing it permanently in shell profile files.Like a lobster shell, security has layers — review code before you run it.
latestvk973x46ynzq6vxb7778wewsyd982prea
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binstmap-lbs
EnvTMAP_WEBSERVICE_KEY
Primary envTMAP_WEBSERVICE_KEY
Install
Install tmap-lbs (node)
Bins: tmap-lbs
npm i -g @tencent-map/lbs-skills