tencentmap-lbs-skill

腾讯地图位置服务，支持POI搜索、路径规划、旅游规划、周边搜索，轨迹数据可视化和地图数据可视化

This skill appears internally consistent: it uses the tmap-lbs CLI installed from the npm package @tencent-map/lbs-skills and your Tencent Web Service key to call map APIs. Before installing or enabling it, consider: 1) Verify the npm package and publisher (review the package on the npm registry or GitHub) before a global install; 2) Install in an isolated environment or use a non-global install if you prefer; 3) Limit the TMAP_WEBSERVICE_KEY scope and rotate it if possible — treat it like any API secret and do not paste it into chats; 4) Be cautious when supplying data URLs for trail visualization (ensure they point to benign JSON and not internal endpoints or sensitive resources); 5) Monitor API usage on your Tencent account after enabling the skill to detect unexpected calls. If you want higher assurance, review the source of @tencent-map/lbs-skills or prefer calling Tencent Web Service APIs directly with your own vetted code.

Type: OpenClaw Skill Name: tencentmap-lbs-skill Version: 1.0.0 The skill provides a legitimate interface for Tencent Map Location Based Services (LBS) using a CLI tool (`tmap-lbs`) and an npm package (`@tencent-map/lbs-skills`). The instructions in `SKILL.md` and the `references/` directory are well-structured and include security-conscious directives, such as explicitly telling the agent not to output the API key value when checking configuration. The functionality—including POI search, route planning, and trajectory visualization—is consistent with the stated purpose and uses official Tencent domains (e.g., `mapapi.qq.com`). No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.