by 下载技能包
最后更新
2026/4/2
安全扫描
OpenClaw
可疑
medium confidenceThe skill's purpose (China highway route planning) is plausible and most instructions align with that purpose, but there are incoherences: it declares a required binary (node) despite being instruction-only, references an AMAP API key without declaring it as a required credential, and instructs writing a local cache — these mismatches and privacy touches warrant caution.
评估建议
Before installing or enabling this skill: 1) Confirm you will (manually) provide an AMAP_WEBSERVICE_KEY and verify how the agent will store/use it — SKILL.md references this env var but the skill metadata does not declare it. 2) Ask whether your agent/runtime will actually have node on PATH and why node is listed as required for a text-only skill; if unnecessary, it's safer to remove that requirement. 3) Be aware the skill asks for license-plate information (personal data) and may reuse 'known' ...详细分析 ▾
ℹ 用途与能力
The skill's name/description and the runtime instructions consistently target route planning and using Amap (高德) APIs to compute costs and exploit local free-ring-road policies — that is coherent. However, the registry metadata requires the 'node' binary even though the skill is instruction-only and contains no code files; that requirement appears disproportionate or leftover metadata and is not justified by the SKILL.md.
ℹ 指令范围
SKILL.md stays within route-planning scope: geocoding, driving-route queries to Amap, computing cost comparisons, and generating navigation links. It explicitly instructs the agent to ask for the user's license-plate city and to cache fetched policy data to a local file. The instructions do not tell the agent to read unrelated system files, but the phrasing about using any 'known user default plate' implies the agent may reuse stored user profile data — that has privacy implications and is underspecified.
✓ 安装机制
There is no install spec and no code files; the skill is instruction-only, so nothing new is written to disk by an installer. This is the lower-risk install model. The only persistence described is the skill's own policy cache file written at runtime (see persistence_privilege).
⚠ 凭证需求
SKILL.md shows the skill uses Amap Web Service and documents the environment variable AMAP_WEBSERVICE_KEY, but the registry metadata lists no required env vars or primary credential. That mismatch is important: the skill depends on an API key for network calls but does not declare it. Additionally, the skill asks for the user's license-plate city (sensitive/personal data) and suggests using 'known' defaults — storage/handling of this personal info is not declared.
ℹ 持久化与权限
The instructions require caching policy search results to ~/.openclaw/workspace/shared/skills/china-highway-route/policy-cache.json with a one-month TTL. Writing to a skill-specific cache inside the workspace is reasonable for this purpose, but users should be aware that policy data and possibly derived user context could be persisted. The skill does not request system-wide privileges and always:false, so it is not force-included.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.62026/3/20
Version 1.0.6 - 补充了“多政策组合优化”核心原则，支持同时组合多条高速免费政策，提升省钱路线规划准确性 - 添加“多政策组合案例”与详细规划步骤说明，帮助用户理解组合优化效果 - 原输出格式、API 用法、缓存策略无变动 - 仅文档（SKILL.md）改进，无程序功能变更
● 无害
安装命令
点击复制官方npx clawhub@latest install china-highway-route
镜像加速npx clawhub@latest install china-highway-route --registry https://cn.longxiaskill.com