baidu-maps-sse

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's mapping purpose is plausible, but its actual footprint is a generic proxy wrapper: it installs third-party gateway tooling, forwards the API key and all location queries through DeepNLP infrastructure, and even mixes Baidu branding with Google Places functionality. This is not confirmed malware, but the intermediary routing and credential forwarding are disproportionate versus a direct official maps integration.

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Mar 30, 2026, 02:41 PM
Package URL
pkg:socket/skills-sh/aiagenta2z%2Fonekey-gateway%2Fbaidu-maps-sse%2F@e1921bf30806cf301a6ab66d446f012b06a62e87
Security Audit — socket — baidu-maps-sse