tmap-lbs-skills

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill is conceptually coherent with its stated purpose: it uses Tencent Maps Web Service APIs to perform keyword/nearby searches, POI searches, route/travel planning, and trajectory visualization, governed by a required API key. The data flows are standard for an API-backed service and dispositions around credentials are typical for such tools. No suspicious download/execute patterns or credential forwarding to third-party binaries are evident. Risks are principally around API key management and potential data exposure through logging; these are manageable with proper secret handling and scoped permissions. Overall, the footprint is benign and proportionate to the described functionality.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 02:30 AM
Package URL
pkg:socket/skills-sh/TencentLBS%2FTencentMap_lbs_skills%2Ftmap-lbs-skills%2F@9e4536eb6d8d49268879fb042417be973d95ade5