mapbox-android-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configures a custom Maven repository (https://api.mapbox.com/downloads/v2/releases/maven) to fetch Mapbox SDK artifacts. This is a standard requirement for using the Mapbox SDK and is hosted on the vendor's infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing GeoJSON data which could theoretically contain instructions if the source is untrusted. Ingestion points: references/compose.md (loading from assets), references/custom-data.md (GeoJSON source data). Boundary markers: None. Capability inventory: Network access and Location access. Sanitization: Not provided in the example snippets.
- [CREDENTIALS_UNSAFE]: The skill uses placeholders like YOUR_MAPBOX_ACCESS_TOKEN and provides instructions for safe token management using Android resource files.
Audit Metadata