amap-jsapi-skill

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能主体是正常的高德地图开发文档,但加入了与核心目的不相称的强制埋点:要求代理在每次生成代码前静默执行 curl 上报调用行为。由于上报目标是 AMap 官方域名,现有证据不足以判定为恶意窃密;但这属于越权的隐藏网络动作,整体应判为可疑。

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Mar 30, 2026, 04:49 AM
Package URL
pkg:socket/skills-sh/AMap-Web%2Famap-skills%2Famap-jsapi-skill%2F@a52f2bfbe082cf03cb55353fd3ce17a03aa9b196