← 返回 Skills 市场

Google Maps Skill

Name: Google Maps Skill
Author: deusyu

作者 Rainman · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

433

总下载

当前安装

版本数

在 OpenClaw 中安装

/install google-maps-skill

功能描述

通过脚本直连 Google Maps Platform API 完成地理编码、逆地理编码、路线规划、地点搜索、地点详情、海拔查询和时区查询。用户要求"Google Maps 查询""国际路线规划""地点搜索"或需要用命令行脚本调用 Google Maps API 时使用。

使用说明 (SKILL.md)

Google Maps Skill

Quick Start

Ensure GOOGLE_MAPS_API_KEY is set.
Run bun scripts/gmaps.ts --help in this skill directory.
Pick the matching command from references/command-map.md.

Workflow

Validate user intent and select one command.
Coordinates use lat,lng order (Google convention).
Keep output as raw Google Maps JSON without wrapping fields.
Treat any API business error as failure.

Commands

Full command mapping: references/command-map.md
Ready-to-run examples: references/examples.md

Notes

This skill is script-first and does not run an MCP server.
Only GOOGLE_MAPS_API_KEY is supported.

安全使用建议

This package implements a straightforward Google Maps CLI and will make network requests directly to Google Maps Platform endpoints using your API key. Before installing: 1) Be aware the code expects the environment variable GOOGLE_MAPS_API_KEY (the registry metadata incorrectly omits this); ensure you supply a restricted API key (restrict by API, referrer/IP, and billing limits). 2) The CLI is executed with 'bun' (scripts/gmaps.ts) — you need Bun installed; the registry also omits this runtime requirement. 3) The skill sends your queries to Google (as ?key=... for legacy endpoints or X-Goog-Api-Key header for newer APIs) and prints raw Google JSON to stdout — monitor key usage and billing. 4) The omission of required env/binary declarations looks like sloppy packaging rather than malicious intent, but treat the API key as sensitive and only install if you accept that the skill will use your key to call Google Maps APIs.

功能分析

Type: OpenClaw Skill Name: google-maps-skill Version: 1.0.0 The skill bundle is a well-structured and legitimate CLI wrapper for the Google Maps Platform API. It provides functionality for geocoding, directions, elevation, and place searches, with all network requests directed to official Google endpoints (googleapis.com). The implementation includes robust input validation (scripts/lib/validate.ts), clear error handling, and comprehensive unit tests, with no evidence of malicious behavior, data exfiltration, or prompt injection.

能力评估

ℹ Purpose & Capability

The code and SKILL.md implement a Google Maps CLI calling official Google Maps endpoints (geocode, reverse-geocode, directions, places, elevation, timezone). Those capabilities align with the skill name and description. However the registry metadata lists no required environment variables or binaries even though the CLI requires a GOOGLE_MAPS_API_KEY and is executed with 'bun' — the metadata omission is inconsistent with the stated purpose.

✓ Instruction Scope

SKILL.md instructs the agent to set GOOGLE_MAPS_API_KEY and run 'bun scripts/gmaps.ts'. The runtime instructions and the code limit behavior to building requests to Google Maps Platform endpoints and returning raw Google JSON. The skill does not attempt to read unrelated files, other env vars, or contact non-Google endpoints.

✓ Install Mechanism

No install spec is provided (instruction-only install), and the repository contains the CLI source. There are no downloads, external install URLs, or archive extraction steps in the manifest — low install risk.

⚠ Credentials

The runtime and tests require one secret: GOOGLE_MAPS_API_KEY (used as either a query param or X-Goog-Api-Key header depending on API). The registry metadata incorrectly lists no required env vars and no primary credential. The absence of a declared primary credential and the failure to document the required API key in the registry is a material inconsistency that could lead to accidental key exposure or misuse if users assume no credential is required.

✓ Persistence & Privilege

The skill does not request permanent or global agent privileges (always: false), does not modify other skills or system settings, and does not persist credentials itself. Autonomous invocation is allowed by default but is not combined with other high-risk privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install google-maps-skill
安装完成后，直接呼叫该 Skill 的名称或使用 /google-maps-skill 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: geocoding, directions, places search, elevation, timezone

元数据

Slug google-maps-skill

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题