jsapi-ui-kit Security Report — Trusted | ClawSafe

0 /100

jsapi-ui-kit

百度地图官方 UI 交互组件，提供地点自动补全、地点检索、地点详情和路径规划组件的使用参考

Pure documentation-only skill containing Markdown reference files for Baidu Maps JSAPI UI components with no executable code or suspicious behavior.

Skill Namejsapi-ui-kit

Duration29.8s

Enginepi

✓

Safe to install

No action needed. This skill provides only documentation references and is safe to use.

Resource	Declared	Inferred	Status	Evidence
Filesystem	`READ`	`READ`	✓ Aligned	SKILL.md requires reading markdown reference files
Network	`NONE`	`NONE`	—	No network calls, only references Baidu API documentation URLs
Shell	`NONE`	`NONE`	—	No shell scripts present
Environment	`READ`	`READ`	✓ Aligned	Requires BMAP_JSAPI_KEY env var for legitimate API usage
Skill Invoke	`NONE`	`NONE`	—	No skill chaining
Clipboard	`NONE`	`NONE`	—	No clipboard access
Browser	`NONE`	`NONE`	—	No browser automation
Database	`NONE`	`NONE`	—	No database access

1 findings

🔗

Medium External URL 外部 URL

https://api.map.baidu.com/api?v=1.0&type=webgl&ak=YOUR_AK

references/getting-started.md:32

File Tree

6 files · 33.5 KB · 1487 lines

Markdown 6f · 1487L

├─ ▾ 📁 references

│ ├─ 📝 getting-started.md Markdown 53L · 1.1 KB

│ ├─ 📝 place-autocomplete.md Markdown 481L · 10.5 KB

│ ├─ 📝 place-detail.md Markdown 213L · 4.3 KB

│ ├─ 📝 place-search.md Markdown 223L · 4.4 KB

│ └─ 📝 route-plan.md Markdown 471L · 11.6 KB

└─ 📝 SKILL.md Markdown 46L · 1.7 KB

✓ No executable scripts or code files present

✓ No credential harvesting mechanisms

✓ No network exfiltration endpoints

✓ All capabilities match declared permissions

✓ No hidden functionality detected

✓ Pure documentation-only skill with standard Markdown files