amap-maps-streamableHTTP

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's mapping functions are coherent, but it routes both user data and authentication through the DeepNLP OneKey Gateway instead of official Amap APIs. Registry-based installs reduce supply-chain concern, yet the intermediary credential/data flow is inconsistent with a straightforward Amap skill and creates meaningful trust and privacy risk.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 16, 2026, 02:18 PM
Package URL
pkg:socket/skills-sh/aiagenta2z%2Fonekey-gateway%2Famap-maps-streamablehttp%2F@7910597b119c882fcf62e44a508c33979fa47360
Security Audit — socket — amap-maps-streamableHTTP