Travel Mapify

Create interactive travel route maps from location names with real FlyAI hotel search. Supports AI Vision analysis of travel planning images.

Do not install or run this skill on any machine you care about without code changes. Specific risks: 1) scripts/amap-proxy.js constructs a shell command that includes user-provided query/city parameters and invokes exec — this can allow arbitrary command execution if an attacker can send crafted requests to the proxy. 2) The proxy sets CORS '*' and calls server.listen(PORT) without binding to localhost, making it network-accessible by default. 3) The package embeds a default Amap API key and claims 'no user API key required', which may leak or be abused. Recommended mitigations before using: run only in an isolated VM/container; modify amap-proxy.js to bind to 127.0.0.1 and avoid using shell exec (use a direct API client or properly escape/validate inputs); remove/discard the embedded API key and require a user-provided key; verify that required external skills (amap-maps, FlyAI CLI) are legitimate and present; inspect and run the code manually rather than allowing any automated install. If you lack the ability to review or safely sandbox code, treat this skill as unsafe.

Type: OpenClaw Skill Name: travel-mapify Version: 2.2.2 The skill contains a critical shell injection vulnerability in 'scripts/amap-proxy.js'. The 'handleSearch' function accepts user-controlled input from URL parameters ('query' and 'city') and concatenates them directly into a shell command string executed via 'child_process.exec', allowing for arbitrary command execution. Additionally, 'scripts/ensure_servers_running.py' performs aggressive system actions by identifying and forcefully killing processes on ports 8769 and 8780 using 'lsof' and 'os.kill'. While these appear to be poorly implemented utility features rather than intentional malware, the RCE risk via the proxy server is significant.