Spatix

Create beautiful maps in seconds. Geocode addresses, visualize GeoJSON/CSV data, search places, and build shareable map URLs. No GIS skills needed. Agents ea...

This skill appears to do what it says: call api.spatix.io to create maps, geocode addresses, and upload datasets. Before installing or using it: (1) remember that any data you send (addresses, GeoJSON, CSV) is transmitted to Spatix and uploaded datasets may be public depending on the fields you set — avoid sending sensitive location data; (2) if you follow the SKILL.md suggestion to 'pip install spatix-mcp', review the package source and contents before installing; (3) if you need to manage or remove maps later, consider creating an account and using the JWT so you retain deletion/edit control; (4) review Spatix's privacy, dataset licensing defaults, and rate limits before integrating into automated agents.

Type: OpenClaw Skill Name: spatix Version: 1.1.0 The skill is classified as suspicious due to the instruction to `pip install spatix-mcp` in `SKILL.md`. While this command is presented as a legitimate step to set up an MCP server for the skill, it introduces a supply chain risk by instructing the AI agent to download and execute code from an external package repository (PyPI). There is no direct evidence of malicious intent within the provided files, but the execution of external code via `pip install` is a significant risky capability.