remotion-maps
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill dynamically loads the CesiumJS library from its official, versioned CDN (cesium.com). This is a standard implementation for large 3D mapping libraries and is documented as a requirement for the Cesium technique.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were detected. The skill instructions explicitly direct users to store sensitive API keys in environment variables (e.g., REMOTION_MAPTILER_KEY, REMOTION_GOOGLE_MAPS_API_KEY), which is a recommended practice for secret management.
- [COMMAND_EXECUTION]: While the skill includes scripts for geospatial data preparation (e.g., prep-cesium-path.mjs, prep-geo.mjs), these are local utility scripts intended for developer use during the build process and do not execute untrusted or remote commands.
- [SAFE]: The components and techniques provided utilize standard web mapping patterns with MapLibre, Mapbox, and Cesium. Data ingestion is limited to local GeoJSON files or authenticated tile requests to trusted providers (Google, MapTiler, Mapbox).
Audit Metadata