web-maps-leaflet
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill demonstrates patterns that interpolate data from external sources (such as GeoJSON properties) directly into the DOM using innerHTML or Leaflet's bindPopup method.
- Ingestion points: Data enters the map context via GeoJSON features (feature.properties.name and feature.properties.color in examples/core.md) and properties provided to custom controls (props in LegendControl.update in examples/advanced.md).
- Boundary markers: None identified. The instructions do not define delimiters for untrusted data or warn about embedded instructions in the processed data.
- Capability inventory: The skill facilitates DOM manipulation and event handling within the browser environment. No dangerous system-level capabilities such as subprocess spawning, file-write operations, or network exfiltration are demonstrated in the provided scripts.
- Sanitization: Absent. The examples show direct string concatenation into HTML contexts, specifically through the use of this._div.innerHTML and layer.bindPopup, without escaping or validation. This creates a surface for indirect prompt injection or cross-site scripting (XSS) if the source data is attacker-controlled.
Audit Metadata