mapbox-maplibre-migration

Pass

Audited by ZeroLeaks on Apr 15, 2026

Risk Level: LOW
Scan Summary

The SKILL.md is mostly clear and reviewable, though one transparency concern around a potential hardcoded credential weakens full pre-use reviewability and warrants a closer look. The skill keeps instruction and data boundaries reasonably separate and does not push the agent to treat external content as policy. Tested scenarios did not show material prompt-injection risk, but confidence is low: behavior analysis was not run, limiting the ability to assess whether loading this skill materially changes downstream behavior compared to a no-skill baseline, and the credential concern remains unresolved.

Score
82/100
Verdict
PASS
Confidence
low
Findings
1
Section Analysis (3)
TransparencyWARNING
61/100

The skill has 1 transparency concern that weaken pre-use reviewability, mainly around potential hardcoded credential.

Prompt InjectionPASS
92/100

The scanned skill keeps data and instructions reasonably separate and does not strongly encourage the agent to treat external content as policy.

Agent BehaviorSkipped

Behavior analysis was not run.

Findings (1)
CRITICAL

Potential hardcoded credential

Coverage DetailsClick to expand
Discovered Files
1
Omitted Files
0
Analyzed Bytes
14.3 KB
Sections Completed
2
Sections Skipped
1
Behavior Probes
0/0
Audit Metadata
Score
82/100
Verdict
PASS
Confidence
low
Sections
2/3 completed
Findings
1
Mode
risk
Files Scanned
1
Duration
99.8s
Analyzed
Apr 15, 2026, 08:47 PM
Security Audit — zeroleaks — mapbox-maplibre-migration