maps-geography
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download geographic data from jsDelivr and load mapping libraries from the Unpkg CDN. Evidence: Fetches countries-110m.json from cdn.jsdelivr.net. Evidence: Loads d3.min.js, topojson-client.min.js, and leaflet.js from unpkg.com.
- [SAFE]: The skill demonstrates high security awareness by mandating the use of Subresource Integrity (SRI) hashes and version-pinned URLs for all external assets, preventing supply chain attacks. Evidence: Specific integrity attributes (e.g., sha384-CjloA8y00...) are provided for every remote script and stylesheet.
Audit Metadata