web-maps-mapbox
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides explicit security guidance for preventing Cross-Site Scripting (XSS). It highlights the dangers of using
Popup.setHTML()with unsanitized user input and provides clear patterns for using safe alternatives likesetText()orsetDOMContent(). - [SAFE]: Credential management follows industry best practices by instructing the use of environment variables (
process.env.MAPBOX_ACCESS_TOKEN) rather than hardcoding sensitive API tokens within the source code. - [SAFE]: All external downloads and library references (including
mapbox-gl,@mapbox/mapbox-gl-geocoder, and@mapbox/mapbox-gl-directions) originate from official Mapbox repositories or domains, which are recognized as well-known and trusted technology services. - [SAFE]: No obfuscation, dynamic code generation from untrusted sources, or malicious persistence mechanisms were detected. The skill's primary focus is on providing high-quality, safe implementation patterns for vector map visualization.
Audit Metadata