bmap-jsapi-v4

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides extensive technical documentation and code samples for the Baidu Maps JavaScript API v4.0. All examples align with legitimate development workflows.
  • [SAFE]: The instructions explicitly emphasize security best practices, such as warning developers never to expose their real API keys (AK) in shared code, logs, or skill responses, and providing placeholders like YOUR_BAIDU_MAP_AK instead.
  • [SAFE]: Network operations are restricted to official vendor endpoints (e.g., api.map.baidu.com) for loading map resources. These are documented neutrally as required for well-known services.
  • [SAFE]: The skill includes instructions for proper resource cleanup (e.g., map.destroy(), event unbinding) to prevent memory leaks and unexpected behavior in browser environments.
  • [SAFE]: External dependencies, such as the @baidumap/jsapi-v4-types package, are official type definitions associated with the vendor and represent a safe supply chain for TypeScript integration.
  • [SAFE]: Use of Base64-encoded SVG data URIs for custom map markers and overlays is a standard development practice for embedding assets and does not constitute malicious obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 04:37 PM
Security Audit — agent-trust-hub — bmap-jsapi-v4