web-maps-mapbox

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a best-practice guide for Mapbox GL JS integration. It demonstrates a security-first approach by explicitly documenting Cross-Site Scripting (XSS) risks in the 'RED FLAGS' section of SKILL.md and providing 'Bad Example' illustrations in examples/core.md to educate users on avoiding setHTML with untrusted data. It correctly recommends setText() and setDOMContent() as safe alternatives for displaying external content. All external resources and packages (e.g., mapbox-gl, @mapbox/mapbox-gl-geocoder) are official Mapbox utilities from a well-known service.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 03:00 AM
Security Audit — agent-trust-hub — web-maps-mapbox