smart-site-selection-skill

专为实体商业选址设计，自动采集核心客群与经营策略，提取Top3优质地段坐标并生成宏观微观商业洞察报告。

What to check before installing: - The bundle requires an AMap Web Service API key (AMAP_WEBSERVICE_KEY). Confirm you are willing to provide that key and that you trust the unknown source; the top-level registry metadata incorrectly omitted this requirement. - The package mixes Python code with an npm-style package.json (versions differ: package.json v2.1.0 vs skill v1.0.0). This is a packaging inconsistency — ask the author or inspect the repository origin before trusting it. - The code calls only AMap endpoints and writes files to /tmp and the current directory; it does not phone home to unexpected domains. Still, review scripts/site_selection_engine.py and report_builder.py locally to confirm no hidden endpoints are added. - If you will supply a real AMAP key, run the skill in a sandbox or with a scoped/test key first, and inspect generated output and logs. - If you need stronger assurance: request the skill author/maintainer, a homepage, or a checksumed release (GitHub release) and confirm the exact expected env vars in the registry metadata. The current metadata mismatch is the main reason to treat this as suspicious rather than benign.

Type: OpenClaw Skill Name: smart-site-selection-skill Version: 1.0.0 The skill bundle is a legitimate business intelligence tool for site selection using the AutoNavi (AMap) LBS API. It implements a structured SOP in SKILL.md that enforces user input validation (Physical Blockage) and delegates data processing to a Python backend to prevent AI hallucinations. The code in main.py and scripts/site_selection_engine.py handles API requests with appropriate rate-limiting (time.sleep) and generates local HTML reports using ECharts. No evidence of data exfiltration, malicious command execution, or harmful prompt injection was found.