web-maps-mapbox
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a best-practice guide for Mapbox GL JS integration. It demonstrates a security-first approach by explicitly documenting Cross-Site Scripting (XSS) risks in the 'RED FLAGS' section of
SKILL.mdand providing 'Bad Example' illustrations inexamples/core.mdto educate users on avoidingsetHTMLwith untrusted data. It correctly recommendssetText()andsetDOMContent()as safe alternatives for displaying external content. All external resources and packages (e.g.,mapbox-gl,@mapbox/mapbox-gl-geocoder) are official Mapbox utilities from a well-known service.
Audit Metadata