ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      baidu-maps

      Safety Report

      百度地图 CLI 助手

      @baidu-maps

      百度地图开放平台 CLI。凡涉及百度地图开发、HTML/demo、WebAPI/BMapGL、AK/个性化地图样式/配额等,须先触发本 skill 并完成环境与 AK 流程,再查文档或写代码。涵盖:CLI 安装、Skills/MCP 配置、账户与 AK、个性化地图样式、地点/路线/地址解析等。

      0Downloads
      0Installs
      0Stars
      1Versions
      API Integration13,230CLI & Shell Tools4,287Maps & Geolocation2,468

      Security Analysis

      high confidence
      Suspicious0.08 risk

      This Baidu Maps helper is coherent overall, but it pushes creation and use of unrestricted Baidu Maps API keys and installs a remote CLI, which could expose your account quota.

      May 18, 20261 files5 concerns
      Purpose & Capabilityconcern

      The Baidu Maps CLI/account workflow matches the stated purpose, but the code-generation workflow requires browser AKs with wildcard referer access and full AK insertion into code, which is broader than a safe default.

      Instruction Scopeconcern

      The skill gives strong mandatory workflow instructions, including preferring only unrestricted browser AKs and creating one if none exists. It does require user consent for creation, but the required scope is still overbroad.

      Install Mechanismnote

      The skill downloads an executable CLI from a remote URL, chmods it, and adds ~/bin to the shell profile. This is central to the CLI purpose and asks for user approval, but no checksum, signature, or pinned version is provided.

      Credentialsconcern

      The skill can log into a Baidu account, list/create API keys, install skills, and configure MCP before responding to map-development tasks. These are high-impact account and agent-environment changes.

      Persistence & Privilegenote

      It persists PATH changes and MCP configuration containing AK credentials. The artifact discloses this and asks for review, but users should understand those credentials may remain available to local tools or future sessions.

      Guidance

      Review this skill carefully before installing. It is designed for Baidu Maps work, but you should only approve the CLI download from a trusted source, avoid unrestricted wildcard AKs unless you understand the quota-abuse risk, and check where MCP credentials are stored.

      Latest Release

      v0.1.0

      bmap-cli 0.1.0 - 首次发布的百度地图开放平台 CLI 工具,支持从安装、技能/MCP 配置到账户与 AK 管理全流程自动化。 - 提供一套标准流程,涉及 CLI 装配、技能/MCP 幂等合并、AK/个性化地图样式查建,并规范命令输出处理与错误排查。 - 严格控制浏览器端 AK 的 Referer(仅认 `*`),所有标识/配置一律从 CLI 原始输出获得,禁止猜测或手填。 - 支持覆盖地点/路线/地址解析、天气、开发 API、DEMO 生成等多种百度地图应用场景。 - 明确限定各步操作、AK 安全展示、白名单规则及多账户切换流程。

      Popular Skills

      keevx-image-to-video

      @baidu-xiling · 9 stars

      keevx-image-generate

      @baidu-xiling · 7 stars

      keevx-video-translate

      @baidu-xiling · 6 stars

      Baidu Text Translate

      @baidu-translate · 3 stars

      Baidu File Translate

      @baidu-translate · 1 stars

      self-improving-agent

      @pskoett · 1,456 stars

      Published by @baidu-maps on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]