test-ai-map-api
v1.0.1百度地图 Agent Plan 直连调用 place、direction、geocoding、reverse_geocoding、weather 五类能力。
⭐ 0· 14·0 current·0 all-time
byClifton Hills@zxf969175364
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description map to Baidu Map Agent Plan APIs; required binary (curl) and required env var (BAIDU_MAP_AUTH_TOKEN) are exactly what a direct-HTTP API wrapper would need.
Instruction Scope
SKILL.md only instructs constructing HTTP requests to api.map.baidu.com using Authorization header and curl, plus parameter rules; it does not instruct reading unrelated files, other env vars, or sending data to unexpected endpoints.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or written to disk by an installer.
Credentials
Only a single API credential (BAIDU_MAP_AUTH_TOKEN) is required and is justified by the API authentication described; no unrelated secrets or config paths are requested.
Persistence & Privilege
always:false (default) and no indications the skill modifies other skills or system settings; autonomous invocation is allowed by platform default but is not combined with other red flags.
Assessment
This skill appears to do what it says: it will use curl and the BAIDU_MAP_AUTH_TOKEN you provide to call Baidu's Agent Plan APIs at api.map.baidu.com. If you install it, only provide a Baidu-issued token (do not reuse unrelated credentials). Confirm the token's scope and revoke it if you see unexpected usage. Because the skill can be invoked by the agent, be mindful of granting it access to sensitive or high‑cost tokens and monitor API usage after enabling it.Like a lobster shell, security has layers — review code before you run it.
latestvk97ag0w8vsf57yrnpnxbwnfamn84e8m2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl
EnvBAIDU_MAP_AUTH_TOKEN
Primary envBAIDU_MAP_AUTH_TOKEN