bmap-cli

External Downloads

• The skill instructs the agent to download a binary executable for the Baidu Maps CLI tool from an external URL: https://open-agent-cli.bj.bcebos.com/cli/bmap-cli-<BMAP_OS>-<BMAP_ARCH>.
• The download destination is within the user's home directory: ~/bin/bmap-cli-....

Remote Code Execution

• Following the download, the skill directs the agent to modify file permissions using chmod +x and subsequently execute the downloaded binary to perform various platform operations.

Persistence & Environment Modification

• The skill establishes persistence by installing the CLI tool into the user's binary path (~/bin) and copying skill directories to the agent's internal skills path (~/.agents/skills/).
• It modifies the agent's environment by updating MCP configuration files and persisting API keys into environment-specific configuration files.

Indirect Prompt Injection

• The skill processes data returned from CLI commands such as ak list, style list, and ap list. This output is used to drive decision-making and code generation processes.
• Ingestion points: Outputs from the bmap-cli command-line tool.
• Boundary markers: The skill relies on specific protocols for interpreting CLI output rather than explicit instruction delimiters.
• Capability inventory: Includes file system access (read/write), network operations via the CLI, and subprocess execution.
• Sanitization: The skill explicitly mandates masking of sensitive tokens in all outputs (e.g., 前4位****后4位).

Credentials Handling

• The skill manages sensitive Baidu Maps API Keys (AKs) and platform tokens. It provides instructions for persisting these credentials in environment files and emphasizes that full tokens should never be displayed in plain text in the user interface.
• It suggests using chmod 600 on MCP configuration files containing credentials to limit access to the current user.