amap-map-google-maps-migration
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Mostly a documentation-style migration skill with coherent mapping content and official-looking AMap/OPNavi endpoints. The main security concern is transitive trust: it instructs the agent to install/update another skill repo via `npx skills add`. A secondary concern is the documented HTTP geolocation endpoint handling device identifiers, though this appears as a warning in docs rather than hidden behavior. Overall: suspicious/medium risk due to external skill installation, not confirmed malware.
Confidence: 87%Severity: 52%
Audit Metadata