cesiumjs-viewer-setup
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches map imagery from OpenStreetMap's public tile servers (SKILL.md).
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external, untrusted data which represents a potential injection surface.
- Ingestion points: The
viewerDragDropMixinallows the viewer to ingest local files (CZML, GeoJSON, KML) in SKILL.md, and the customGeocoderServiceimplementation demonstrates fetching and parsing data from external API providers in SKILL.md. - Boundary markers: None identified in the instructional code snippets in SKILL.md.
- Capability inventory: The skill demonstrates capabilities for network requests (
fetch), file ingestion, and 3D rendering in SKILL.md. - Sanitization: The example geocoder implementation in SKILL.md does not show explicit input sanitization or output validation, relying on standard property mapping.
Audit Metadata