amap-map-google-maps-migration

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly a documentation-style migration skill with coherent mapping content and official-looking AMap/OPNavi endpoints. The main security concern is transitive trust: it instructs the agent to install/update another skill repo via `npx skills add`. A secondary concern is the documented HTTP geolocation endpoint handling device identifiers, though this appears as a warning in docs rather than hidden behavior. Overall: suspicious/medium risk due to external skill installation, not confirmed malware.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Sep 20, 2026, 04:38 PM
Package URL
pkg:socket/skills-sh/amap-web%2Famap-map-agent-skills%2Famap-map-google-maps-migration%2F@fbb0f9629304cf36275bc3d4da5ada061d799729562dddfb8911de3766e69620