remotion-maps
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads resources from several well-known services and trusted providers:
- CesiumJS is loaded from the official Cesium CDN (cesium.com).
- Map tiles and data are fetched from Google Maps (googleapis.com), MapTiler (maptiler.com), and Mapbox (mapbox.com).
- MapLibre workers are imported from the unpkg.com CDN.
- [DYNAMIC_EXECUTION]: The MapLibre and Cesium components use dynamic script loading techniques to initialize their respective map engines at runtime:
- CesiumFlythrough.tsx injects a script tag to load CesiumJS from its CDN.
- The MapLibre example generates a Web Worker script via URL.createObjectURL to handle background map rendering tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill includes scripts that process untrusted data from external sources:
- Ingestion points: techniques/maptiler/scripts/prep-geo.mjs and techniques/cesium/scripts/prep-cesium-path.mjs read GeoJSON files provided by the user.
- Boundary markers: The scripts do not use explicit delimiters or 'ignore' instructions when reading the GeoJSON content.
- Capability inventory: The skill performs filesystem writes via fs.writeFileSync and network operations via map provider APIs.
- Sanitization: The scripts parse JSON but do not sanitize metadata properties within the GeoJSON features for potential prompt injection vectors.
Audit Metadata