tmap-lbs-skills
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill is conceptually coherent with its stated purpose: it uses Tencent Maps Web Service APIs to perform keyword/nearby searches, POI searches, route/travel planning, and trajectory visualization, governed by a required API key. The data flows are standard for an API-backed service and dispositions around credentials are typical for such tools. No suspicious download/execute patterns or credential forwarding to third-party binaries are evident. Risks are principally around API key management and potential data exposure through logging; these are manageable with proper secret handling and scoped permissions. Overall, the footprint is benign and proportionate to the described functionality.
Confidence: 98%
Audit Metadata